CVE-2000-0400
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2000-05-13
- Last modified
- 2024-08-08
- Weaknesses
- CWE-20
Affected products
References
- http://marc.info/?l=bugtraq&m=95868514521257&w=2
- http://www.securityfocus.com/bid/1221
