PT-2001-2353 · Microsoft · Internet Explorer

Published 2001-12-20 · Updated 2021-07-23 · CVE-2001-1219

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6.0 and earlier

Description The issue allows malicious website operators to cause a denial of service, resulting in a client crash. This is achieved through JavaScript that continually refreshes the window via self.location.

Recommendations For Microsoft Internet Explorer versions 6.0 and earlier, consider disabling JavaScript execution from untrusted sources to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1219

Affected Products

Internet Explorer

References · 3

• http://securityfocus.com/archive/1/246649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1219 · Security Note
• http://securityfocus.com/bid/3730 · Note