CVE-2001-0149

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

32.21% chance of exploitation in the next 30 days, 98th percentile

Published

2001-05-07

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20243

References

• CVE Record
• NVD entry

Related

• CVE-2001-0148
• CVE-2001-0150
• CVE-2001-0144
• CVE-2001-0151
• CVE-2001-0137
• CVE-2001-0152