Vulnerability in Microsoft Plus

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders.

EPSS: 0.089 (94.7th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2001-0152?
CVE-2001-0152 is a vulnerability in Microsoft Plus. Published 2001-05-03.
Is CVE-2001-0152 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.