vulnwire
7.5high

CVE-2001-0875in critical feed2 exploits

Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the d…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
28.1%
percentile 98%
Public exploits
2
Exploit-DB

Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.

Exploit prediction (EPSS)

28.06% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-641 Microsoft Internet Explorer 6.0 SP2 - File Download Security Warning Bypass · remote · 2004-11-19
  • EDB-21164 Microsoft Internet Explorer 5.5/6.0 - Spoofable File Extensions · remote · 2001-11-26

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • securityfocus.com /archive/1/245594 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/7636 · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1014 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securityfocus.com /bid/3597 · vdb-entry, x_refsource_BID, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2001/ms01-058 · vendor-advisory, x_refsource_MS, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.