CVE-2001-0727
Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 31.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability."
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 31.01% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/internet explorer
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=100835204509262&w=2
- http://marc.info/?l=bugtraq&m=100861273114437&w=2
- http://www.cert.org/advisories/CA-2001-36.htmlPatch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/m-027.shtml
- http://www.kb.cert.org/vuls/id/443699US Government Resource
- http://www.osvdb.org/3033
- http://www.securityfocus.com/bid/3578
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7703
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A921
- http://marc.info/?l=bugtraq&m=100835204509262&w=2
- http://marc.info/?l=bugtraq&m=100861273114437&w=2
- http://www.cert.org/advisories/CA-2001-36.htmlPatch, Third Party Advisory, US Government Resource
- http://www.ciac.org/ciac/bulletins/m-027.shtml
- http://www.kb.cert.org/vuls/id/443699US Government Resource
- http://www.osvdb.org/3033
- http://www.securityfocus.com/bid/3578
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7703
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A921
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.