CVE-2001-0149 Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
MediumCVSS 5.0
EPSS 32.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | <= 5.5 | No fix listed |
References
- 20000926 IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files exploit mailing-list patch vendor-advisory
- 20000926 IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files mailing-list
- 1718 vdb-entry
- MS01-015 vendor-advisory
- ie-getobject-expose-files(5293) vdb-entry