CVE-2001-0904: Medium severity Microsoft Internet Explorer vulnerability

Published Nov 20, 2001

Updated

Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTPUSERAGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.

Affected Software

2 affected components

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=6.0

Event History

Nov 20, 2001

CVE Published

05:00 AM

Feb 2, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0904?

CVE-2001-0904 is considered a moderate threat as it allows remote attackers to easily identify and target vulnerable clients.

How do I fix CVE-2001-0904?

To mitigate CVE-2001-0904, ensure that all security patches for Internet Explorer are applied, particularly the Q312461 patch.

What versions of Internet Explorer are affected by CVE-2001-0904?

CVE-2001-0904 affects Internet Explorer versions 5.5 and 6.0.

What type of vulnerability is CVE-2001-0904?

CVE-2001-0904 is a client-side vulnerability that exposes users to risks from malicious websites.

Can CVE-2001-0904 lead to further exploitation?

Yes, if an attacker identifies vulnerable clients through CVE-2001-0904, they could potentially exploit other vulnerabilities.