First published: Mon Feb 21 2000(Updated: )
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Internet Explorer | =4.x | |
Internet Explorer | =5 | |
Microsoft Outlook |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0160 is considered a high severity vulnerability due to its potential to allow remote attackers to install software without user consent.
To fix CVE-2000-0160, users should upgrade to a more recent version of Internet Explorer or apply relevant security patches provided by Microsoft.
CVE-2000-0160 affects Microsoft Internet Explorer versions 4.x and 5, as well as certain versions of Microsoft Outlook.
Yes, CVE-2000-0160 can be exploited remotely by attackers to install harmful software without user permission.
If you are still using Internet Explorer 4.x or 5.x, it is strongly recommended to upgrade your browser to a more secure version to mitigate the risks associated with CVE-2000-0160.