CVE-2001-0154

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.cert.org/advisories/CA-2001-06.html	US Government Resource
http://www.ciac.org/ciac/bulletins/l-066.shtml
http://www.securityfocus.com/bid/2524
http://www.osvdb.org/7806
http://securitytracker.com/id?1001197
http://marc.info/?l=bugtraq&m=98596775905044&w=2
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A141
https://exchange.xforce.ibmcloud.com/vulnerabilities/6306
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-020

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:internet_explorer::::::::
	cpe:2.3:a:microsoft:internet_explorer:5.01:::::::*

Information

Published : 2001-05-03 04:00

Updated : 2021-07-23 12:18

NVD link : CVE-2001-0154

Mitre link : CVE-2001-0154

JSON object : View

Products Affected

microsoft

internet_explorer

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.cert.org/advisories/CA-2001-06.html", "name": "CA-2001-06", "tags": ["US Government Resource"], "refsource": "CERT"}, {"url": "http://www.ciac.org/ciac/bulletins/l-066.shtml", "name": "L-066", "tags": [], "refsource": "CIAC"}, {"url": "http://www.securityfocus.com/bid/2524", "name": "2524", "tags": [], "refsource": "BID"}, {"url": "http://www.osvdb.org/7806", "name": "7806", "tags": [], "refsource": "OSVDB"}, {"url": "http://securitytracker.com/id?1001197", "name": "1001197", "tags": [], "refsource": "SECTRACK"}, {"url": "http://marc.info/?l=bugtraq&m=98596775905044&w=2", "name": "20010330 Incorrect MIME Header Can Cause IE to Execute E-mail Attachment", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A141", "name": "oval:org.mitre.oval:def:141", "tags": [], "refsource": "OVAL"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/6306", "name": "ie-mime-execute-code(6306)", "tags": [], "refsource": "XF"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-020", "name": "MS01-020", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2001-0154", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2001-05-03T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.5"}, {"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-23T12:18Z"}