CVE-2000-0464
HighExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the 'Malformed Component Attribute' vulnerability.
Risk Assessment
This vulnerability can lead to remote code execution, posing a significant security threat to systems using these versions of the browser.
Recommendation
It is recommended to update Internet Explorer to the latest version or consider using an alternative browser to minimize risk.
Other vulnerabilities in Internet Explorer 4.x, 5.x
See all- CVE-2000-0519Low
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session.
- CVE-2000-0465Medium
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, allowing a remote attacker to read client files via the frame.
- CVE-2000-0156Medium
Internet Explorer versions 4.x and 5.x allow remote web servers to access files on the client that are outside of its security domain, known as the 'Image Source Redirect' vulnerability.
Original NVD description (English source)
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.