CVE-2000-0768

Published: Oct 20, 2000Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.

Affected (9)

Products: Microsoft: Ie, Internet Explorer

Microsoft

2 products

Internet Explorer

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 4.0
Microsoft Ie	Version 4.0
Microsoft Ie	Version 5.0
Microsoft Ie	Version 5.0
Microsoft Ie	Version 5.0
Microsoft Ie	Version 5.0
Microsoft Internet Explorer	Version 4.0
Microsoft Internet Explorer	Version 5.01
Microsoft Internet Explorer	Version 5.5

References (4)

http://www.securityfocus.com/bid/1564

Source: cve@mitre.org

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055

Source: cve@mitre.org

http://www.securityfocus.com/bid/1564

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-055

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.