CVE Catalog
CVE-2000-0160
HighExploitation Probability (EPSS)
Very high risk9.21%
95th percentile - higher than 95% of all known CVEs
Summary
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Risk Assessment
An attacker can install malicious software on users' systems, potentially leading to system takeover or data theft.
Recommendation
It is recommended to update Internet Explorer to the latest version and disable ActiveX support to minimize risk.
Original NVD description (English source)
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.