PT-2001-2450 · Microsoft · Outlook Express+2

Publicado 2001-04-20 · Atualizado 2021-07-23 · CVE-2001-1325

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.0 through 5.5 Outlook Express versions 5.0 through 5.5

Description: The issue allows remote attackers to execute scripts even when Active Scripting is disabled. This is achieved by including scripts in XML stylesheets (XSL) referenced using an IFRAME tag. The problem may be related to a vulnerability in Windows Scripting Host (WSH).

Recommendations: For Internet Explorer versions 5.0 through 5.5, consider disabling the use of IFRAME tags that reference XML stylesheets until a fix is available. For Outlook Express versions 5.0 through 5.5, restrict the processing of XML stylesheets referenced by IFRAME tags to minimize the risk of script execution.

Exploit

Correção

Identificadores relacionados

CVE-2001-1325

Produtos afetados

Internet Explorer

Outlook Express

Windows Script Host

Referências · 5

• 🔥 https://exploit-db.com/exploits/20782 · Exploit
• 🔥 http://securityfocus.com/bid/2633 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1325 · Nota de Segurança
• http://securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6448 · Nota