CVE-2001-0149

medium

Description

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/5293

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015

http://www.securityfocus.com/bid/1718

http://marc.info/?l=ntbugtraq&m=96999020527583&w=2

Details

Source: Mitre, NVD

Published: 2001-06-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N