Lucene search
HistoryApr 10, 2000 - 4:00 a.m.
CVE-2000-0201
internet explorer
security vulnerability
remote attackers
nvd
cve-2000-0201.
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.5%
The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
Affected configurations
Node
microsoftinternet_explorerMatch5.0
ORmicrosoftinternet_explorerMatch5.01
References
Related
cvelist
cvelist
CVE-2000-0201
2000-04-10 04:00:00
nvd
nvd
CVE-2000-0201
2000-03-01 05:00:00
cert
cert
HHControl Object (showHelp) may execute shortcuts embedded in help files
2000-09-26 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.5%
Related for CVE-2000-0201