CVE-2001-0724

Internet Explorer 5.5 - Zone Spoofing via Dotless IP Address

Title source: llm
STIX 2.1

Description

Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8471
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/5556

Scores

EPSS 0.1232
EPSS Percentile 95.8%

Details

Status published
Products (1)
microsoft/internet_explorer 5.5
Published Nov 14, 2001
Tracked Since Feb 18, 2026