CVE-2001-1325 Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are r...
HighCVSS 7.5
EPSS 27.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.0 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft outlook express | = 5.0 | No fix listed |
| Microsoft outlook express | = 5.5 | No fix listed |
References
- 20010420 XML scripting in IE, Outlook Express mailing-list
- 2633 exploit patch vdb-entry vendor-advisory
- ie-xml-stylesheets-scripting(6448) vdb-entry