PT-2000-1248 · Microsoft+1 · Internet Explorer+1

Published 2000-04-18 · Updated 2021-07-23 · CVE-2000-0266

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer version 5.01

Description The issue allows remote attackers to bypass the cross frame security policy. This is achieved through a malicious applet that interacts with the Java JSObject to modify the DOM properties, setting the IFRAME to an arbitrary Javascript URL.

Recommendations For Internet Explorer version 5.01, consider disabling the use of Java applets or restricting interactions with the Java JSObject to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0266

Affected Products

Internet Explorer

Java

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2000-0266 · Security Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=38FC6130.D6D178FD%40nat.bg · Note
• http://securityfocus.com/bid/1121 · Note