CVE-2000-0767 in Internet Explorer

Riassunto

di MITRE

The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka the "Scriptlet Rendering" vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Divulgazione: 20/10/2000
• Moderazione: accettato
• Voce: VDB-15909
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.12567
• KEV: no
• Attività: molto basso
• Settore: Chemical, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0767
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0767
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0767/