Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1 Security Zone privileges management

Summaryinfo

A vulnerability has been found in Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Security Zone Handler. This manipulation causes privileges management. This vulnerability is registered as CVE-2000-0061. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Microsoft Internet Explorer 4.0/4.0.1/5.0/5.0.1 (Web Browser). It has been declared as critical. Affected by this vulnerability is an unknown part of the component Security Zone Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.

The issue has been introduced in 04/01/1997. The weakness was published 01/07/2000 by Georgi Guninski (Website). It is possible to read the advisory at securityfocus.com. This vulnerability is known as CVE-2000-0061. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are unknown but a public exploit is available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1011 days. During that time the estimated underground price was around $25k-$100k.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (19719) and SecurityFocus (BID 923†). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Web Browser

Vendor

• Microsoft

Name

• Internet Explorer

Version

• 4.0
• 4.0.1
• 5.0
• 5.0.1

License

• commercial

Support

• end of life

Website

• Vendor: https://www.microsoft.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion