CVE-2000-0162: Medium severity Microsoft ie vulnerability
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the Microsoft virtual machine (the Java plugin/runtime) in Internet Explorer 4.x and 5.x to prevent Java applets from escaping the sandbox and reading local files.
Internet Explorer (Microsoft virtual machine) Microsoft VM / Java plugin = disabled - Compensating control
Block or restrict execution of Java applets and untrusted ActiveX/plug‑ins (e.g., via browser security settings, group policy, or network controls) and avoid visiting untrusted websites until a vendor patch or fixed version is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0162?
CVE-2000-0162 is classified as a critical vulnerability due to its ability to allow attackers to read sensitive files without user consent.
How do I fix CVE-2000-0162?
To fix CVE-2000-0162, you should apply the relevant patches provided by Microsoft for Internet Explorer versions 4.x and 5.x.
Who is affected by CVE-2000-0162?
CVE-2000-0162 affects users of Microsoft Internet Explorer versions 4.0, 4.1, and 5.0 on multiple operating systems including Windows 95, 98, and NT.
What is the impact of CVE-2000-0162 exploitation?
Exploitation of CVE-2000-0162 can lead to unauthorized file access, allowing attackers to read sensitive information stored on the victim's machine.
Is CVE-2000-0162 still relevant today?
While CVE-2000-0162 is over two decades old, its underlying principles highlight ongoing concerns regarding the security of outdated software and potentially vulnerable environments.