CVE-2000-0400
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, allowing an attacker to download any type of file to a user's system by encoding it within an email message or news post.
Risk Assessment
An attacker can exploit this vulnerability to download malicious software or other harmful files onto users' systems, posing a significant security threat to the organization.
Recommendation
It is recommended to update Internet Explorer to the latest version and implement a policy that restricts file downloads to trusted sources.
Original NVD description (English source)
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.