CVE-2000-0464

High

Published: 17/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.43%

96th percentile - higher than 96% of all known CVEs

Summary

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the 'Malformed Component Attribute' vulnerability.

Risk Assessment

This vulnerability can lead to remote code execution, posing a significant security threat to systems using these versions of the browser.

Recommendation

It is recommended to update Internet Explorer to the latest version or consider using an alternative browser to minimize risk.

Original NVD description (English source)

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.