medium5.1Public exploit code
CVE-2000-1061
Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Virtual Machine 2000/3100/3200/3300 Series - 'com.ms.activeX.ActiveXComponent' Arbitrary Program Execution2000-10-05 · remote · windows · Verified
Impact
Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Versions 4.x, 5.x |
References
- NVD record
- CVE.org record
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-075
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5127
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-075
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5127