CVE-2001-0246: Medium severity Microsoft Internet Explorer vulnerability
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0246?
CVE-2001-0246 has a critical severity rating due to its potential to allow unauthorized access to local files.
How do I fix CVE-2001-0246?
To fix CVE-2001-0246, upgrade to a later version of Internet Explorer that is not affected by this vulnerability.
What versions of Internet Explorer are affected by CVE-2001-0246?
CVE-2001-0246 affects Internet Explorer versions up to and including 5.5 and also 5.01.
What type of attack does CVE-2001-0246 allow?
CVE-2001-0246 allows remote attackers to read local files by exploiting domain verification issues in frames.
Is CVE-2001-0246 still a concern for modern browsers?
CVE-2001-0246 is primarily a concern for legacy systems still using Internet Explorer 5.5 or earlier.