PT-2000-1248 · Microsoft+1 · Internet Explorer+1

Publicado 2000-04-18 · Atualizado 2021-07-23 · CVE-2000-0266

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer version 5.01

Description The issue allows remote attackers to bypass the cross frame security policy. This is achieved through a malicious applet that interacts with the Java JSObject to modify the DOM properties, setting the IFRAME to an arbitrary Javascript URL.

Recommendations For Internet Explorer version 5.01, consider disabling the use of Java applets or restricting interactions with the Java JSObject to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0266

Produtos afetados

Internet Explorer

Java

Referências · 3

• http://securityfocus.com/templates/archive.pike?list=1&msg=38FC6130.D6D178FD%40nat.bg · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0266 · Nota de Segurança
• http://securityfocus.com/bid/1121 · Nota