Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2001-1410

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet 6及其早期版本存在漏洞。远程攻击者使用Javascript window.createPopup方法创建chromeless窗口，攻击者借助社会工程模仿受害者的表现且执行未认证的行为。

AI Predicted 5.0 Difficulty: Easy EPSS 50.55% · P99

Public Exploits 1

ExploitDB · 1 EDB-21127 [remote]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2001-1410

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Internet Explorer安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet 6及其早期版本存在漏洞。远程攻击者使用Javascript window.createPopup方法创建chromeless窗口，攻击者借助社会工程模仿受害者的表现且执行未认证的行为。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2001-1410

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-1410

请登录查看更多情报信息。

Vendor Advisories for CVE-2001-1410 (4)

Mailing List Discussions for CVE-2001-1410 (3)

Other References for CVE-2001-1410 (2)

Same Patch Batch · n/a · 2003-07-17 · 9 CVEs total

CVE-2003-0142 Adobe Acrobat Reader (acroread)不可信插件运行漏洞
CVE-2003-0352 Microsoft Windows DCOM RPC接口长主机名远程缓冲区溢出漏洞(MS03-026)
CVE-2003-0458 HP NonStop SeeView Server Gateway权限提升漏洞
CVE-2003-0526 Microsoft ISA服务器HTTP错误处理跨站脚本执行漏洞(MS03-028)
CVE-2003-0577 mpg123不正确计算帧大小内存破坏漏洞
CVE-2003-0578 IBM U2 UniVerse特权提升漏洞
CVE-2003-0579 IBM U2 UniVerse获取特权漏洞
CVE-2003-0580 IBM U2 UniVerse任意代码执行漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2001-1410

No comments yet

Leave a comment