PT-2000-1342 · Microsoft · Internet Explorer+1

Published 2000-05-13 · Updated 2016-11-07 · CVE-2000-0400

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer 5

Description The issue allows an attacker to download any type of file to a user's system by encoding it within an email message or news post, due to the lack of restriction on downloadable file types by the Microsoft Active Movie ActiveX Control in Internet Explorer.

Recommendations For Internet Explorer 5, consider restricting the use of the Microsoft Active Movie ActiveX Control until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2000-0400

Affected Products

Active Movie Activex Control

Internet Explorer

References · 4

• 🔥 https://exploit-db.com/exploits/19928 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0400 · Security Note
• http://marc.info/?l=bugtraq&m=95868514521257&w=2 · Note
• http://securityfocus.com/bid/1221 · Note