Unrated severityNVD Advisory· Published Jul 4, 2001· Updated Apr 16, 2026
CVE-2001-1243
CVE-2001-1243
Description
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.
Affected products
2- cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/2973nvdExploitPatchVendor Advisory
- www.iss.net/security_center/static/6800.phpnvdVendor Advisory
- www.securityfocus.com/archive/1/194919nvd
News mentions
0No linked articles in our index yet.