CVE-2000-0465
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, allowing a remote attacker to read client files via the frame.
Risk Assessment
An attacker could gain access to sensitive user data, posing a significant threat to information security within the organization.
Recommendation
It is recommended to update Internet Explorer to the latest version or consider using a different, more secure browser.
Other vulnerabilities in Internet Explorer 4.x, 5.x
See all- CVE-2000-0519Low
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session.
- CVE-2000-0464High
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the 'Malformed Component Attribute' vulnerability.
- CVE-2000-0156Medium
Internet Explorer versions 4.x and 5.x allow remote web servers to access files on the client that are outside of its security domain, known as the 'Image Source Redirect' vulnerability.
Original NVD description (English source)
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.