CVE-2000-0201

The CVE concerns Internet Explorer 5.x where window.showHelp() can execute compiled HTML help files (CHM) from non-local paths, enabling arbitrary code via Microsoft Networking. Technical context from connected docs shows the vulnerability can be triggered when a CHM is placed locally or accessib...

CVE-2000-0201

The window.showHelp method in Internet Explorer 5.x does not restrict HTML help files .chm to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking...