Every CVESearch/Get API key

CVE-2001-0643

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file...

5.0 MediumPublic exploit

CVE-2001-0643 is a medium vulnerability (CVSS 5.0) in Microsoft Internet Explorer, published September 20, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
11.4%EPSS, 96th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.

Exploit likelihood

11.4%Down 17.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMicrosoft Internet Explorer 5.5 - CLSID File Execution2001-04-17

What each source reports

NVD Score used5.0

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.

Record
CVE-2001-0643
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE ListNo score

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.

Record
CVE-2001-0643
Updated
2026-11-02
EUVDEUVD-2001-0630No score

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.

Record
EUVD-2001-0630
Updated
2026-11-03
GitHub AdvisoriesGHSA-c2hj-4gfw-x63qNo score

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file...

Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.

Record
GHSA-c2hj-4gfw-x63q
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 4 moreShow less
MoveEnter Open