CVE-2000-0400
Microsoft Internet Explorer - Improper Input Validation
Title source: ruleDescription
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by http-equiv · textremotewindows
https://www.exploit-db.com/exploits/19928
Scores
EPSS
0.1635
EPSS Percentile
94.7%
Classification
CWE
CWE-20
Status
draft
Affected Products (1)
microsoft/internet_explorer
Timeline
Published
May 13, 2000
Tracked Since
Feb 18, 2026