漏洞信息详情

Microsoft Internet Explorer 安全漏洞

• CNNVD编号：CNNVD-200104-016
• 危害等级： 高危
  
• CVE编号： CVE-2001-1325
• 漏洞类型： 其他
• 发布时间： 2001-04-20
• 威胁类型： 远程
• 更新时间： 2021-07-26
• 厂        商： microsoft
• 漏洞来源：

漏洞简介

Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。

Internet Explorer和Outlook Express在处理XML样式表时存在安全漏洞。尽管所有安全区域中的活动脚本都被禁止，但是IE和OE仍然允许执行包含在XML页面的样式表中的脚本。

漏洞公告

厂商补丁：

微软早先提供的用于Windows Script Host的补丁也可以用于本漏洞：

Microsoft Internet Explorer 5.5:

Microsoft patch ste51en

http://www.microsoft.com/scripting/downloads/v51/other/ste51en.exe

Windows 95, 98, NT 4.0

Microsoft patch scripten

http://www.microsoft.com/scripting/downloads/v51/windows2000/scripten.exe

Windows 2000

Microsoft patch scr55en

http://www.microsoft.com/scripting/downloads/v55/other/scr55en.exe

Microsoft Internet Explorer 5.0:

Microsoft patch ste51en

http://www.microsoft.com/scripting/downloads/v51/other/ste51en.exe

Windows 95, 98, NT 4.0

Microsoft patch scripten

http://www.microsoft.com/scripting/downloads/v51/windows2000/scripten.exe

Windows 2000

Microsoft patch scr55en

http://www.microsoft.com/scripting/downloads/v55/other/scr55en.exe

Microsoft Outlook Express 5.5:

Microsoft patch scr55en

http://www.microsoft.com/scripting/downloads/v55/other/scr55en.exe

Windows 95, 98, NT 4.0

Microsoft patch scripten

http://www.microsoft.com/scripting/downloads/v51/windows2000/scripten.exe

Windows 2000

Microsoft patch ste51en

http://www.microsoft.com/scripting/downloads/v51/other/ste51en.exe

Microsoft Outlook Express 5.0:

Microsoft patch ste51en

http://www.microsoft.com/scripting/downloads/v51/other/ste51en.exe

Windows 95, 98, NT 4.0

Microsoft patch scripten

http://www.microsoft.com/scripting/downloads/v51/windows2000/scripten.exe

Windows 2000

Microsoft patch scr55en

http://www.microsoft.com/scripting/downloads/v55/other/scr55en.exe

参考网址

来源:http://nvd.nist.gov/nvd.cfm?cvename=CVE-2001-1325※http://www.securityfocus.com/bid/2633※http://www.nsfocus.net/vulndb/1398

链接:无

来源:BUGTRAQ

链接:http://www.securityfocus.com/archive/1/[email protected]

来源:BID

链接:https://www.securityfocus.com/bid/2633

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/6448

受影响实体

• Microsoft Ie:5.0  
• Microsoft Ie:5.5  
• Microsoft Outlook_express:5.0  
• Microsoft Outlook_express:5.5  

补丁

• Microsoft Internet Explorer 安全漏洞的修复措施