CVE-2000-0162

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 18, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01634.6asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.CVE-2000-01647.2The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.CVE-2000-01657.5The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.CVE-2000-016610.0Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.CVE-2000-01672.1IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pi CVE-2000-01685.0Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th CVE-2000-01697.5Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.CVE-2000-01707.2Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.CVE-2000-01717.2atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privi CVE-2000-01727.2The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.CVE-2000-01735.0Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.CVE-2000-01745.0StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.