CVE-2000-0201

Internet Explorer 5.x - Remote Code Execution via window.showHelp() Method

Title source: llm
STIX 2.1

Description

The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1033

Scores

EPSS 0.0685
EPSS Percentile 93.4%

Details

Status published
Products (2)
microsoft/internet_explorer 5.0
microsoft/internet_explorer 5.01
Published Mar 01, 2000
Tracked Since Feb 18, 2026