Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2001-1218

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Internet Explorer是与Windows操作系统捆绑在一起的流行的Web浏览器。 Solaris平台下的IE存在设计问题,当访问某些中文网页时,可能会使X Server崩溃。 在某些情况下,Solaris下的IE访问某些网页时,当网页已经显示出来,快速地上下滑动窗口会使X Server崩溃,用户回到命令行界面。如果IE被最大化好几次,X Server也有可能会崩溃。

AI Predicted 5.0 Difficulty: Easy EPSS 1.49% · P72
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2001-1218

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft IE for Solaris X Server拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Internet Explorer是与Windows操作系统捆绑在一起的流行的Web浏览器。 Solaris平台下的IE存在设计问题,当访问某些中文网页时,可能会使X Server崩溃。 在某些情况下,Solaris下的IE访问某些网页时,当网页已经显示出来,快速地上下滑动窗口会使X Server崩溃,用户回到命令行界面。如果IE被最大化好几次,X Server也有可能会崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2001-1218

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-1218

登录查看更多情报信息。

Vendor Advisories for CVE-2001-1218 (2)

Same Patch Batch · n/a · 2002-03-15 · 131 CVEs total

CVE-2001-1213 DataWizard FtpXQ 缺省特权帐号权限漏洞
CVE-2002-0103 Oracle9iAS Web Cache权限提升漏洞
CVE-2002-0102 Oracle9iAS Web Cache Null字符处理不当导致拒绝服务漏洞
CVE-2002-0101 Microsoft Internet Explorer 安全漏洞
CVE-2002-0100 AOLServer受口令保护的文件泄露漏洞
CVE-2002-0099 Michael Lamont Savant Web服务器超长请求拒绝服务攻击漏洞
CVE-2001-1226 AdCycle远程SQL查询修改漏洞。
CVE-2001-1225 Hughes Technologies Mini SQL服务拒绝漏洞
CVE-2001-1224 Les VanBrunt AdRotate Pro SQL命令注入漏洞
CVE-2001-1223 ELSA Lancom 1100 Office不安全web管理漏洞
CVE-2001-1222 Plesk Server Administrator 源代码泄露漏洞
CVE-2001-1221 D-Link DWL-1000AP 无线局域网访问点'public'口令漏洞
CVE-2001-1220 D-Link DWL-1000AP 无线局域网访问点明文密码漏洞
CVE-2001-1219 Microsoft Internet Explorer 安全漏洞
CVE-2001-1217 Oracle 9i应用服务器PL/SQL Apache模块目录遍历漏洞
CVE-2001-1216 Oracle 9i应用服务器PL/SQL Apache模块远程缓冲区溢出漏洞
CVE-2001-1214 Marcus Xenakis manual.php远程执行任意命令漏洞
CVE-2001-1202 DeleGate跨站脚本漏洞
CVE-2001-1198 HP-UX rlpdaemon任意创建日志文件漏洞
CVE-2001-1197 KDE2 klprfax_filter以不安全的方式创建临时文件漏洞

Showing top 20 of 131 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2001-1218

No comments yet


Leave a comment