CVE-2000-1061: Medium severity Microsoft ie vulnerability

Published Dec 11, 2000

Updated

Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email, aka the "Microsoft VM ActiveX Component" vulnerability.

Affected Software

2 affected components

Microsoft ie=4.x

Microsoft ie=5.x

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1061?

CVE-2000-1061 is considered a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2000-1061?

To fix CVE-2000-1061, it is recommended to disable the Microsoft Virtual Machine or upgrade to a supported version of Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2000-1061?

CVE-2000-1061 affects Microsoft Internet Explorer versions 4.x and 5.x.

What kind of attacks can be executed using CVE-2000-1061?

CVE-2000-1061 allows attackers to execute arbitrary commands through malicious web pages or emails.

Is CVE-2000-1061 still a concern for modern systems?

CVE-2000-1061 is less of a concern for modern systems that do not use Internet Explorer 4.x or 5.x, but awareness of legacy systems is still important.