CVE-2000-0156
MediumExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Internet Explorer versions 4.x and 5.x allow remote web servers to access files on the client that are outside of its security domain, known as the 'Image Source Redirect' vulnerability.
Risk Assessment
Organizations may be exposed to unauthorized access to sensitive user data, potentially leading to information leaks or other attacks.
Recommendation
It is recommended to update Internet Explorer to the latest version or consider using alternative browsers that are not vulnerable to this issue.
Other vulnerabilities in Internet Explorer 4.x, 5.x
See all- CVE-2000-0519Low
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session.
- CVE-2000-0465Medium
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, allowing a remote attacker to read client files via the frame.
- CVE-2000-0464High
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the 'Malformed Component Attribute' vulnerability.
Original NVD description (English source)
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.