Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2001-0875 — Microsoft Internet Explorer vulnerability

4 documents3 sources
Severity
7.5HIGHNVD
EPSS
22.7%
top 4.11%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedNov 26
Latest updateApr 30

Description

Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-6q67-2q8f-xvf4: Internet Explorer 5↗2022-04-30
▶

💥Exploits & PoCs

2
Exploit-DB
Microsoft Internet Explorer 6.0 SP2 - File Download Security Warning Bypass↗2004-11-19
▶
Exploit-DB
Microsoft Internet Explorer 5.5/6.0 - Spoofable File Extensions↗2001-11-26
▶
CVE-2001-0875 — Microsoft vulnerability | cvebase