CVE-2001-0339

Published Jun 27, 2001

Last updated 3 months ago

Overview

Description: Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7BDFCFCB-6E90-4F29-9852-A3099DF05843",
            "versionEndIncluding": "5.5"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References