PT-2000-1183 · Microsoft · Internet Explorer

Published 2000-03-01 · Updated 2021-07-23 · CVE-2000-0201

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 5.x

Description The issue concerns the window.showHelp() method, which fails to restrict the execution of HTML help files (.chm) to the local host. This allows remote attackers to execute arbitrary commands via Microsoft Networking.

Recommendations For Internet Explorer version 5.x, consider disabling the window.showHelp() method until a patch is available. Restrict access to HTML help files (.chm) to minimize the risk of exploitation. Avoid using the window.showHelp() method for remote HTML help files until the issue is resolved.

Fix

Related Identifiers

CVE-2000-0201

Affected Products

Internet Explorer

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0201 · Security Note
• http://securityfocus.com/bid/1033 · Note