Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-0149. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages a vulnerability in Microsoft Internet Explorer and Outlook Express via the 'GetObject()' JScript function and the 'htmlfile' ActiveX object to read arbitrary files on the victim's system. The PoC includes a Base64-encoded payload to bypass patches, demonstrating an information leak attack.
Description
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
Exploits (1)
This exploit leverages a vulnerability in Microsoft Internet Explorer and Outlook Express via the 'GetObject()' JScript function and the 'htmlfile' ActiveX object to read arbitrary files on the victim's system. The PoC includes a Base64-encoded payload to bypass patches, demonstrating an information leak attack.