CVE-2001-0091: Low severity Microsoft Internet Explorer vulnerability
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0091?
CVE-2001-0091 is considered a critical severity vulnerability that allows unauthorized access to arbitrary files.
How does CVE-2001-0091 exploit work?
CVE-2001-0091 exploits Internet Explorer by rendering arbitrary file types instead of HTML, enabling attackers to read sensitive files.
Which versions of Internet Explorer are affected by CVE-2001-0091?
CVE-2001-0091 affects Internet Explorer versions 4.0, 5.0, 5.01, and 5.5.
How do I fix CVE-2001-0091?
To fix CVE-2001-0091, update your Internet Explorer to the latest version that is no longer vulnerable to this exploit.
Can CVE-2001-0091 be mitigated?
Mitigation for CVE-2001-0091 includes disabling the ActiveX controls or using alternative web browsers that are not vulnerable.