CVEvulnerability
CVE-2000-0596
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability.
Affected configurations
• microsoft internet explorer 4.0.1
• microsoft internet explorer 5
References
- http://www.cert.org/advisories/CA-2000-16.html US Government Resource
- http://www.securityfocus.com/bid/1398 www.securityfocus.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=000d01bfe0fb%24418f59b0%2496217aa8%40src.bu.edu www.securityfocus.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589359.762392DB%40nat.bg www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049 docs.microsoft.com
- http://www.cert.org/advisories/CA-2000-16.html US Government Resource
- http://www.securityfocus.com/bid/1398 www.securityfocus.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=000d01bfe0fb%24418f59b0%2496217aa8%40src.bu.edu www.securityfocus.com
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=39589359.762392DB%40nat.bg www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-049 docs.microsoft.com