Every CVE Search/ Get API key

CVE-2001-0154

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments...

7.5 High

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

Exploit likelihood

11.2%Up 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

Record
CVE-2001-0154
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

Record
CVE-2001-0154
Updated
2026-11-02
EUVDEUVD-2001-0154 No score

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

Record
EUVD-2001-0154
Updated
2026-11-03
GitHub AdvisoriesGHSA-vpgx-hxx7-gv5w No score

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments...

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

Record
GHSA-vpgx-hxx7-gv5w
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0154 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published May 3, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.2%, the 95th percentile. No source names a fixed version.

References

Show 5 moreShow less
MoveEnter Open