medium5.0Public exploit code
CVE-2001-0643
Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5.5 - CLSID File Execution2001-04-17 · remote · windows · Verified
Impact
Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 5.5 |
References
- NVD record
- CVE.org record
- http://vil.nai.com/vil/virusSummary.asp?virus_k=99048
- http://www.guninski.com/clsidext.html
- http://www.osvdb.org/7858
- http://www.sarc.com/avcenter/venc/data/vbs.postcard%40mm.html
- http://www.securityfocus.com/archive/1/176909
- http://www.securityfocus.com/bid/2612
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6426
- http://vil.nai.com/vil/virusSummary.asp?virus_k=99048
- http://www.guninski.com/clsidext.html
- http://www.osvdb.org/7858
- http://www.sarc.com/avcenter/venc/data/vbs.postcard%40mm.html
- http://www.securityfocus.com/archive/1/176909
- http://www.securityfocus.com/bid/2612
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6426