PT-2000-1699 · Microsoft · Internet Explorer

Published 2000-10-20 · Updated 2021-07-23 · CVE-2000-0767

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 4.x through 5.x

Description The issue allows an attacker to read arbitrary files due to the ActiveX control rendering arbitrary file types instead of HTML.

Recommendations For Internet Explorer versions 4.x through 5.x, consider disabling the ActiveX control for invoking scriptlets as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2000-0767

Affected Products

Internet Explorer

References · 3

• http://securityfocus.com/bid/1564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0767 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055 · Note