CVE-2000-0439
LowExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
Internet Explorer 4.0 and 5.0 allow a malicious website to obtain client cookies from another domain by including that domain name and escaped characters in a URL, known as the 'Unauthorized Cookie Access' vulnerability.
Risk Assessment
Organizations may be exposed to user data theft, leading to privacy and security breaches. Malicious sites can exploit this vulnerability to hijack user sessions.
Recommendation
It is recommended to update Internet Explorer to the latest version or consider using an alternative browser to minimize risk. Additionally, implementing cookie security policies is advisable.
Other vulnerabilities in Internet Explorer 4.0, Internet Explorer 5.0
See all- CVE-1999-0488High
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the 'cross frame' vulnerability.
- CVE-1999-0871Low
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the 'Cross Frame Navigate' vulnerability.
Original NVD description (English source)
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS