CVE-2001-0091

The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2001-02-16

Last modified

2024-08-08

Affected products

• Internet Explorer (Microsoft)

References

• http://www.osvdb.org/7820
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6085