CVE-2001-0664: High severity Microsoft Internet Explorer vulnerability

Published Oct 30, 2001

Updated

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."

Affected Software

2 affected components

Microsoft Internet Explorer=5.01

Microsoft Internet Explorer=5.5

Event History

Oct 30, 2001

CVE Published

05:00 AM

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0664?

CVE-2001-0664 has a medium severity rating due to its potential to allow security restriction bypass.

How does CVE-2001-0664 exploit the system?

CVE-2001-0664 exploits malformed URLs with dotless IP addresses to trick Internet Explorer into treating the content as part of the Intranet Zone.

What versions of Internet Explorer are affected by CVE-2001-0664?

CVE-2001-0664 affects Internet Explorer versions 5.0, 5.01, and 5.5.

How can I protect my system from CVE-2001-0664?

To protect against CVE-2001-0664, users should upgrade to a secure version of Internet Explorer or apply relevant security patches.

Is CVE-2001-0664 a known vulnerability?

Yes, CVE-2001-0664 is a known vulnerability that has been documented within cybersecurity resources.