First published: Fri Oct 12 2001(Updated: )
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =5.0 | |
Internet Explorer | =5.0.1 | |
Internet Explorer | =5.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0712 is considered a critical vulnerability due to its potential to allow remote code execution.
To fix CVE-2001-0712, users should upgrade to a newer, patched version of Internet Explorer.
CVE-2001-0712 affects Internet Explorer versions 5.0, 5.0.1, and 5.5.
CVE-2001-0712 is associated with remote code execution attacks that exploit incorrect MIME type handling in Internet Explorer.
CVE-2001-0712 specifically affects systems running vulnerable versions of Internet Explorer, so it does not impact non-IE browsers.