CVE-2001-0664
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via...
CVE-2001-0664 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published October 30, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 18.2%, the 97th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 18.2%EPSS, 97th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5 - Zone Spoofing (MS01-055) | 2001-10-10 |
What each source reports
NVD Score used
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
CVE-2001-0664- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
CVE-2001-0664- Updated
- 2026-11-02
EUVDEUVD-2001-0650No score
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
EUVD-2001-0650- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-35hr-3jc6-7qrpNo score
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via...
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
- Record
GHSA-35hr-3jc6-7qrp- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
morph3us.org/blog?p=31
marc.info?l=bugtraq&m=100281551611595&w=2
osvdb.org/1971
exchange.xforce.ibmcloud.com/vulnerabilities/7258
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051
securityfocus.com/bid/3420
nvd.nist.gov/vuln/detail/CVE-2001-0664
github.com/advisories/GHSA-35hr-3jc6-7qrp