Vulnerability in Microsoft Ie
CVE-2000-0160
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
EPSS: 0.092 (94.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 4.x
- Microsoft Internet_explorer — versions 5
- Microsoft Outlook
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)