← Database

CVE-2001-0149

MEDIUM CVSS: 5.0 Published: 2001-06-02 Modified: 2026-06-16

Description

Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.

Affected Platforms

Microsoft Internet Explorer

Weakness Type

NVD-CWE-Other

References