CVE-2000-0266

Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2000-04-18

Last modified

2024-08-08

Affected products

• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/bid/1121
• http://www.securityfocus.com/templates/archive.pike?list=1&msg=38FC6130.D6D178FD%40nat.bg