CVE-2000-0201
MediumExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, allowing remote attackers to execute arbitrary commands via Microsoft Networking.
Risk Assessment
Attackers can exploit this vulnerability to execute commands remotely, posing a significant security risk to systems using this version of the browser.
Recommendation
It is recommended to update Internet Explorer to the latest version and restrict access to HTML help files only to local sources.
Original NVD description (English source)
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.