Microsoft Internet Explorer 安全漏洞

漏洞信息详情

CNNVD编号：CNNVD-200107-151
危害等级：高危-->
危害等级：高危
CVE编号： CVE-2001-0002
漏洞类型：其他
发布时间： 2001-07-21
威胁类型：远程
更新时间： 2021-07-27
厂商： microsoft
漏洞来源： on Nov 20, 2000 and posted in a Microsoft Security Bulletin (MS01-015).');">Discovered by Geor...

Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。

Microsoft Internet Explorer存在安全漏洞。远程攻击者可以获取缓存内容的物理位置，并且在Local Computer Zone上打开，然后使用已编译的HTML help (.chm)文件执行任意程序。

Microsoft has released a patch which rectifies this issue.

http://www.microsoft.com/windows/ie/download/critical/q286045/default.asp

There have been reports that it is possible to exploit this vulnerability through HTML email and news messages on patched systems.

来源:MS

链接:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015

来源:MISC

链接:http://www.guninski.com/chmtempmain.html

来源:OVAL

链接:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920

来源:OSVDB

链接:http://www.osvdb.org/7823

来源:BID

链接:https://www.securityfocus.com/bid/2456

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/5567

暂无