CVE-2000-0439: Low severity Microsoft Internet Explorer vulnerability

Published May 11, 2000

Updated

Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.

Affected Software

6 affected components

Microsoft Internet Explorer=3.0

Microsoft Internet Explorer=3.2

Microsoft Internet Explorer=4.0

Microsoft Internet Explorer=4.0.1

Microsoft Internet Explorer=4.1

Microsoft Internet Explorer=5.0

Event History

May 11, 2000

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Jul 12, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0439?

CVE-2000-0439 is considered a critical vulnerability as it allows unauthorized access to sensitive user cookies.

How do I fix CVE-2000-0439?

To fix CVE-2000-0439, users should upgrade to a later version of Internet Explorer that is not vulnerable to this issue.

What software versions are affected by CVE-2000-0439?

CVE-2000-0439 affects Internet Explorer versions 3.0, 3.2, 4.0, 4.0.1, 4.1, and 5.0.

Can I still use older versions of Internet Explorer safely despite CVE-2000-0439?

Using older versions of Internet Explorer is not safe as CVE-2000-0439 exposes users to potential cookie theft from malicious websites.

What is the risk associated with CVE-2000-0439?

The risk associated with CVE-2000-0439 includes potential interception of sensitive data such as login credentials and session tokens.