Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0028. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages the `window.external.NavigateAndFind()` function in older versions of Internet Explorer to execute arbitrary JavaScript in the local security context. By passing a `javascript:` URL, an attacker can access local files or sensitive data like cookies or the SAM database.
Description
Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
Exploits (1)
This exploit leverages the `window.external.NavigateAndFind()` function in older versions of Internet Explorer to execute arbitrary JavaScript in the local security context. By passing a `javascript:` URL, an attacker can access local files or sensitive data like cookies or the SAM database.