CVE-2000-0266: Low severity Microsoft Internet Explorer vulnerability
Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Java Runtime Environmentfrom your environment.Uninstall or disable the Java Runtime Environment (JRE) on affected systems to prevent execution of Java applets that could exploit this vulnerability.
- Configuration
Disable Java applet support / the Java browser plugin in Internet Explorer to prevent malicious applets from using the Java JSObject to modify DOM/IFRAME properties.
Internet Explorer Java plugin/applet support = disabled - Compensating control
Block or filter Java applet content at the network perimeter (proxy, firewall, web filter) and restrict access to untrusted web sites to reduce risk of malicious applet delivery and execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0266?
CVE-2000-0266 is categorized as a moderate severity vulnerability.
How does CVE-2000-0266 affect Internet Explorer?
CVE-2000-0266 allows remote attackers to bypass the cross frame security policy in Internet Explorer 5.0 and 5.01.
What is the impact of exploiting CVE-2000-0266?
Exploitation of CVE-2000-0266 can lead to unauthorized access to manipulate the Document Object Model (DOM) through arbitrary JavaScript URLs.
Is there a patch available for CVE-2000-0266?
No official patch is available for CVE-2000-0266 due to its age, but upgrading to a newer version of Internet Explorer is recommended.
What versions of Internet Explorer are vulnerable to CVE-2000-0266?
CVE-2000-0266 affects Internet Explorer versions 5.0 and 5.01.