Lucene search
HistoryFeb 04, 2000 - 5:00 a.m.
CVE-2000-0028
internet explorer
remote attack
file access
navigateandfind function
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
86.9%
Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
Affected configurations
Node
microsoftieMatch4.0a_mac_os
ORmicrosoftinternet_explorerMatch3.0
ORmicrosoftinternet_explorerMatch3.0.2
ORmicrosoftinternet_explorerMatch3.1
ORmicrosoftinternet_explorerMatch3.2
ORmicrosoftinternet_explorerMatch4.0
ORmicrosoftinternet_explorerMatch4.0.1sp2
ORmicrosoftinternet_explorerMatch4.1
ORmicrosoftinternet_explorerMatch4.5
ORmicrosoftinternet_explorerMatch5.0
ORmicrosoftinternet_explorerMatch5.1
Social References
More
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
86.9%
Related for CVE-2000-0028