CVE-2001-0149 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 32.2% (pctl 98)
Patch early
A public exploit exists.
Description
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 32.21% — more likely to be exploited than 98% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2001-06-02 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | internet explorer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows Script Host 5.1/5.5 - 'GetObject()' File Disclosure | 2000-09-26 |
References
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html
- http://marc.info/?l=ntbugtraq&m=96999020527583&w=2
- http://www.securityfocus.com/bid/1718
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5293
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html
- http://marc.info/?l=ntbugtraq&m=96999020527583&w=2
- http://www.securityfocus.com/bid/1718
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5293
→ the Explorer · watch your stack · NVD