CVE-2001-0724: High severity Microsoft Internet Explorer vulnerability

Published Nov 14, 2001

Updated

Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.

Affected Software

1 affected component

Microsoft Internet Explorer=5.5

Event History

Nov 14, 2001

CVE Published

05:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0724?

CVE-2001-0724 is considered a medium severity vulnerability due to the potential security risks involved in zone spoofing.

How do I fix CVE-2001-0724?

To fix CVE-2001-0724, users should upgrade to a later version of Internet Explorer that is no longer affected by this vulnerability.

Which version of Internet Explorer is impacted by CVE-2001-0724?

CVE-2001-0724 specifically impacts Internet Explorer version 5.5.

What type of attack does CVE-2001-0724 enable?

CVE-2001-0724 enables attackers to bypass security restrictions via malformed URLs containing dotless IP addresses.

What are the risks associated with CVE-2001-0724?

The risks associated with CVE-2001-0724 include reduced security measures, which could lead to malicious content being executed in the Intranet Zone.