VULNERABILITY INTELLIGENCE

CVE-2001-0664

CVSS score7.5 HIGH
EPSS probability18.19%
CISA KEVNot currently listed
Published2001-10-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."

Primary references