vulnwire
5.0med

CVE-2001-06431 exploit

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick th…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
11.4%
percentile 96%
Public exploits
1
Exploit-DB

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.

Exploit prediction (EPSS)

11.36% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

Exploits and detections

  • EDB-20774 Microsoft Internet Explorer 5.5 - CLSID File Execution · remote · 2001-04-17

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/6426 · vdb-entry, x_refsource_XF, x_transferred
  • guninski.com /clsidext.html · x_refsource_MISC, x_transferred
  • vil.nai.com /vil/virusSummary.asp?virus_k=99048 · x_refsource_MISC, x_transferred
  • sarc.com /avcenter/venc/data/vbs.postcard%40mm.html · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/2612 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/176909 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • osvdb.org /7858 · vdb-entry, x_refsource_OSVDB, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.