CVE-2001-0664
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via...
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
CVE-2001-0664- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
CVE-2001-0664- Updated
- 2026-11-02
EUVDEUVD-2001-0650 No score
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
EUVD-2001-0650- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-35hr-3jc6-7qrp No score
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via...
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
GHSA-35hr-3jc6-7qrp- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5 - Zone Spoofing (MS01-055) | 2001-10-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0664 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published October 30, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 18.2%, the 97th percentile. No source names a fixed version.
References
morph3us.org/blog?p=31
marc.info?l=bugtraq&m=100281551611595&w=2
osvdb.org/1971
exchange.xforce.ibmcloud.com/vulnerabilities/7258
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051
securityfocus.com/bid/3420
nvd.nist.gov/vuln/detail/CVE-2001-0664
github.com/advisories/GHSA-35hr-3jc6-7qrp