PT-2000-1342 · Microsoft · Internet Explorer+1

Publicado 2000-05-13 · Atualizado 2016-11-07 · CVE-2000-0400

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer 5

Description The issue allows an attacker to download any type of file to a user's system by encoding it within an email message or news post, due to the lack of restriction on downloadable file types by the Microsoft Active Movie ActiveX Control in Internet Explorer.

Recommendations For Internet Explorer 5, consider restricting the use of the Microsoft Active Movie ActiveX Control until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2000-0400

Produtos afetados

Active Movie Activex Control

Internet Explorer

Referências · 4

• 🔥 https://exploit-db.com/exploits/19928 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0400 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=95868514521257&w=2 · Nota
• http://securityfocus.com/bid/1221 · Nota