Vulnerability in N/a

CVE-2001-1243

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS de…

EPSS: 0.632 (99.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

iis-device-asp-dos(6800) (vdb-entry, x_refsource_XF)
2973 (vdb-entry, x_refsource_BID)
20010704 NERF Advisory #4: MS IIS local and remote DoS (mailing-list, x_refsource_BUGTRAQ)