CVE Catalog
CVE-2000-0329
MediumExploitation Probability (EPSS)
Very high risk7.69%
94th percentile - higher than 94% of all known CVEs
Summary
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, known as the 'Active Setup Control' vulnerability.
Risk Assessment
An attacker can exploit this vulnerability to remotely execute malicious code, potentially leading to full control over the victim's system.
Recommendation
It is recommended to block or restrict the use of ActiveX controls and educate users about the risks of opening attachments in HTML emails.
Original NVD description (English source)
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.