Vulnerability in Microsoft Ie
CVE-2000-0768
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
EPSS: 0.095 (94.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 4.0, 5.0
- Microsoft Internet_explorer — versions 4.0, 5.01, 5.5
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)