PT-2000-1183 · Microsoft · Internet Explorer

Publicado 2000-03-01 · Atualizado 2021-07-23 · CVE-2000-0201

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.x

Description The issue concerns the window.showHelp() method, which fails to restrict the execution of HTML help files (.chm) to the local host. This allows remote attackers to execute arbitrary commands via Microsoft Networking.

Recommendations For Internet Explorer version 5.x, consider disabling the window.showHelp() method until a patch is available. Restrict access to HTML help files (.chm) to minimize the risk of exploitation. Avoid using the window.showHelp() method for remote HTML help files until the issue is resolved.

Correção

Identificadores relacionados

CVE-2000-0201

Produtos afetados

Internet Explorer

Referências · 2

• http://securityfocus.com/bid/1033 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0201 · Nota de Segurança