CVE-2001-0149

CVE-2001-0149 describes a file disclosure vulnerability affecting Microsoft Internet Explorer 5.5 and earlier versions, specifically within the Windows Scripting Host. Remote attackers can exploit this flaw by leveraging the GetObject Javascript function and the htmlfile ActiveX object to read arbitrary files on a victim's system. With a CVSS score of 5.0 (Medium), this vulnerability is easily exploitable over the network without authentication, leading to a potential compromise of confidentiality. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry confirms the existence of exploit code, yet it has garnered no community discussion or media coverage.