Lucene search

[email protected]CVE-2000-0503

HistoryJul 12, 2000 - 4:00 a.m.

CVE-2000-0503

2000-07-1204:00:00

[email protected]

web.nvd.nist.gov

internet explorer 5.01

webbrowser control

iframe

security violation

cross frame policy

cve-2000-0503

nvd.

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.5%

JSON

The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event.

Affected configurations

NVD

Node

microsoftinternet_explorerMatch4.0

microsoftinternet_explorerMatch5.0

microsoftinternet_explorerMatch5.01

microsoftinternet_explorerMatch5.5preview

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq4.0
microsoft:internet_explorermicrosoft internet explorereq5.0
microsoft:internet_explorermicrosoft internet explorereq5.01
microsoft:internet_explorermicrosoft internet explorereq5.5

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	4.0
microsoft:internet_explorer	microsoft internet explorer	eq	5.0
microsoft:internet_explorer	microsoft internet explorer	eq	5.01
microsoft:internet_explorer	microsoft internet explorer	eq	5.5

References

archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html

www.securityfocus.com/bid/1311

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.5%

JSON

Related for CVE-2000-0503

nvd1 cvelist1