Vulnerability Details CVE-2000-0768
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.163
EPSS Ranking 94.5%
CVSS Severity
CVSS v2 Score 2.6
References
Products affected by CVE-2000-0768
-
cpe:2.3:a:microsoft:ie:4.0
-
cpe:2.3:a:microsoft:ie:5.0
-
cpe:2.3:a:microsoft:internet_explorer:4.0
-
cpe:2.3:a:microsoft:internet_explorer:5.01
-
cpe:2.3:a:microsoft:internet_explorer:5.5