CVE-2000-0156

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Feb 16, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01577.2NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.CVE-2000-01587.5Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-01597.5HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow a CVE-2000-01607.6The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components withou CVE-2000-01617.5Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex CVE-2000-01625.1The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that CVE-2000-01634.6asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.CVE-2000-01647.2The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.CVE-2000-01657.5The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.CVE-2000-016610.0Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.CVE-2000-01672.1IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pi CVE-2000-01685.0Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th