CVE-2000-0465: Medium severity Microsoft Internet Explorer vulnerability
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Internet Explorerfrom your environment.Uninstall or disable Internet Explorer on affected systems where it is not required and use a non-affected alternative browser for web browsing.
- Compensating control
Prevent or limit use of Internet Explorer for accessing untrusted web content by enforcing use of updated browsers via enterprise policy, and/or block or filter untrusted sites and content using web proxies, WAFs, or network ACLs.
- Operational
If Internet Explorer was used to view untrusted pages, audit for possible local file disclosure and treat sensitive local files as potentially exposed; perform appropriate incident response actions (review logs, investigate signs of data exfiltration, and rotate credentials where exposure is confirmed).
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0465?
CVE-2000-0465 is considered a moderate severity vulnerability due to its potential for exposing sensitive client files.
How do I fix CVE-2000-0465?
To fix CVE-2000-0465, users should upgrade to the latest version of Internet Explorer that is not vulnerable to this issue.
What versions of Internet Explorer are affected by CVE-2000-0465?
CVE-2000-0465 affects Internet Explorer versions 4.0, 5.0, 5.01, and the 5.5 preview.
What type of attack does CVE-2000-0465 allow?
CVE-2000-0465 allows remote attackers to read client files through improper frame domain verification.
Is there a workaround for CVE-2000-0465?
A recommended workaround for CVE-2000-0465 is to avoid using vulnerable versions of Internet Explorer and to utilize other web browsers.