CVE-2000-0503

Low

Published: 06/06/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.27%

95th percentile — higher than 95% of all known CVEs

Summary

The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event.

Risk Assessment

An attacker can exploit this vulnerability to perform cross-site scripting (XSS) attacks, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update Internet Explorer to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event.