CVE-2000-0061: Critical severity Microsoft Internet Explorer vulnerability
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In Internet Options -> Security, set 'Active scripting' for Internet and Local intranet zones to 'Disable' or 'Prompt' to prevent automatic execution of JavaScript while documents are loading.
Internet Explorer Active Scripting (per-zone) = Disable or Prompt - Compensating control
Block or restrict access to untrusted or potentially malicious websites at the network perimeter (firewall, proxy, or web filter) to reduce exposure to pages that could exploit the JavaScript cross-zone execution issue.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0061?
CVE-2000-0061 is considered a moderately severe vulnerability due to its potential to allow unauthorized execution of JavaScript.
How do I fix CVE-2000-0061?
To mitigate CVE-2000-0061, users should upgrade to the latest version of Internet Explorer or apply available security patches.
Which Internet Explorer versions are affected by CVE-2000-0061?
CVE-2000-0061 affects Internet Explorer versions 4.0, 4.0.1, 5.0, 5.01, and 5.5-preview.
What kind of attack can exploit CVE-2000-0061?
CVE-2000-0061 can be exploited to execute JavaScript in a different security context, potentially compromising user data.
When was CVE-2000-0061 discovered?
CVE-2000-0061 was disclosed in the year 2000, highlighting a longstanding security concern in older versions of Internet Explorer.