CVE-2000-0201

CVSS 2.0 Score 5.1 of 10 (medium)

Details

Published Mar 1, 2000
Updated: Nov 20, 2024

Summary

CVE-2000-0201 is a vulnerability affecting Internet Explorer 5.x where the window.showHelp() method fails to restrict HTML help files (.chm). This issue allows remote attackers to execute arbitrary commands on a target system via Microsoft Networking, as the help files are not restricted to the local host. This can potentially lead to serious security consequences, such as data theft or system compromise. Attackers can exploit this vulnerability by tricking users into opening a specially crafted HTML help file, which would then run malicious code on the targeted system. Users are advised to update their Internet Explorer browsers to a secure version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft