CVE Catalog

CVE-2000-0061

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
20.34%

97th percentile - higher than 97% of all known CVEs

Summary

Internet Explorer 5 does not modify the security zone for a document being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.

Risk Assessment

Attackers could exploit this vulnerability to run malicious code in the context of a different security zone, potentially leading to unauthorized access to user data.

Recommendation

It is recommended to update Internet Explorer to the latest version and to limit the use of this outdated browser within the organization.

Original NVD description (English source)

Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS