CVE-2000-0266

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Apr 18, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02674.6Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.CVE-2000-02685.0Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it isCVE-2000-02692.1Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modifyCVE-2000-02703.6The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attCVE-2000-02714.6read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read CVE-2000-02727.8RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.CVE-2000-02735.0PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.CVE-2000-02742.1The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.CVE-2000-02752.1CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file tCVE-2000-02762.1BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.CVE-2000-02777.2Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could alloCVE-2000-02785.0The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program,