CVE-2001-0154

EXPLOITED

Internet Explorer < 5.5 - Remote Code Execution via Malformed MIME Type in HTML Email

Title source: llm

Exploitation Summary

CVE-2001-0154 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

References (9)

Core 9

Core References

US Government Resource third-party-advisory x_refsource_cert

http://www.cert.org/advisories/CA-2001-06.html

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-020

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/2524

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1001197

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/6306

Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac

http://www.ciac.org/ciac/bulletins/l-066.shtml

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A141

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=98596775905044&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/7806

Scores

EPSS 0.1121

EPSS Percentile 95.5%

Details

VulnCheck KEV 2005-08-25

Status published

Products (2)

microsoft/internet_explorer 5.01

microsoft/internet_explorer < 5.5

Published May 03, 2001

Tracked Since Feb 18, 2026