CVE-2001-0643
First published: Thu Sep 20 2001(Updated: )
Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =5.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/176909
- http://vil.nai.com/vil/virusSummary.asp?virus_k=99048
- http://www.sarc.com/avcenter/venc/data/vbs.postcard@mm.html
- http://www.guninski.com/clsidext.html
- http://www.securityfocus.com/bid/2612
- http://www.osvdb.org/7858
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6426
- http://www.sarc.com/avcenter/venc/data/vbs.postcard%40mm.html
Frequently Asked Questions
What is the severity of CVE-2001-0643?
CVE-2001-0643 has a medium severity rating due to its potential to trick users into executing harmful programs.
How do I fix CVE-2001-0643?
To mitigate CVE-2001-0643, it is recommended to upgrade to a more recent version of Internet Explorer or use a different web browser.
What type of attack does CVE-2001-0643 enable?
CVE-2001-0643 enables social engineering attacks by disguising harmful files as safe file types.
Which version of Internet Explorer is affected by CVE-2001-0643?
CVE-2001-0643 specifically affects Internet Explorer version 5.5.
Can CVE-2001-0643 affect my computer even if I have antivirus software?
Yes, CVE-2001-0643 can still pose a risk since it relies on user interaction for execution, making antivirus software less effective.
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/remedy
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-index
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/5.5