CVE-2001-1325: High severity Microsoft Outlook Express vulnerability

Published Apr 20, 2001

Updated

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

Affected Software

4 affected components

Microsoft Outlook Express=5.0

Microsoft Outlook Express=5.5

Microsoft Internet Explorer=5.0

Microsoft Internet Explorer=5.5

Remediation

Patch Available

http://www.securityfocus.com/bid/2633

Event History

Apr 20, 2001

CVE Published

04:00 AM

May 3, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1325?

CVE-2001-1325 has a high severity rating due to the potential for remote code execution.

How do I fix CVE-2001-1325?

To mitigate CVE-2001-1325, upgrade to a newer version of Internet Explorer or Outlook Express that is not susceptible to this vulnerability.

What software is affected by CVE-2001-1325?

CVE-2001-1325 affects Internet Explorer versions 5.0 and 5.5, as well as Outlook Express versions 5.0 and 5.5.

Can CVE-2001-1325 be exploited without user interaction?

Yes, CVE-2001-1325 can potentially be exploited without user interaction if a user visits a specially crafted web page.

What specific vulnerability is associated with CVE-2001-1325?

CVE-2001-1325 is associated with a flaw that allows remote attackers to execute scripts via XML stylesheets referenced in IFRAME tags.