CVE-2000-0400 The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by enco...
HighCVSS 7.5
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5 | No fix listed |
References
- 20000516 MICROSOFT SECURITY FLAW? mailing-list
- 1221 vdb-entry