Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Internet Explorer 5.5 may let websites read local files

CVE-2001-0332 · published 25 years ago
Summary

Internet Explorer versions up to 5.5 do not correctly check the source of content placed in separate frames. A malicious website could use this weakness to trick the browser into revealing files stored on a visitor's computer. Upgrade to a newer browser or apply Microsoft’s security updates to stop the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft internet_explorer 5.01
5.5
cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*
Original advisory text
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending infor...
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and GetObject, aka a variant of the "Frame Domain Verification" vulnerability.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
6% chance of attack within 30 days
Timeline
Published27 Jun 2001
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2001-0332 · NVD
Track software like this
Free during beta