CVE-2001-0664

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-03-09 · updated 2026-06-16

Description

Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."

Affected products

Microsoft Internet Explorer 11: 5.01, 5.5

References

http://marc.info/?l=bugtraq&m=100281551611595&w=2
http://morph3us.org/blog/?p=31
http://www.osvdb.org/1971
http://www.securityfocus.com/bid/3420
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051
https://exchange.xforce.ibmcloud.com/vulnerabilities/7258
http://marc.info/?l=bugtraq&m=100281551611595&w=2
http://morph3us.org/blog/?p=31
http://www.osvdb.org/1971
http://www.securityfocus.com/bid/3420
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051
https://exchange.xforce.ibmcloud.com/vulnerabilities/7258

Get alerted when CVE-2001-0664 or the next vulnerability affects your stack