Lucene search
HistoryJul 12, 2000 - 4:00 a.m.
CVE-2000-0465
cve-2000-0465
internet explorer
frame domain verification
vulnerability
nvd
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.632 Medium
EPSS
Percentile
97.9%
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the “Frame Domain Verification” vulnerability.
Affected configurations
Node
microsoftinternet_explorerMatch4.0
ORmicrosoftinternet_explorerMatch5.0
ORmicrosoftinternet_explorerMatch5.01
ORmicrosoftinternet_explorerMatch5.5preview
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.632 Medium
EPSS
Percentile
97.9%
Related for CVE-2000-0465