CVE-2000-0329

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Nov 11, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03307.6The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File CVE-2000-03315.0Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service vi CVE-2000-03325.0UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that inc CVE-2000-03335.0tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump CVE-2000-03342.1The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize CVE-2000-03357.5The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.CVE-2000-03362.1Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-03377.2Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.CVE-2000-03385.5Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service CVE-2000-03397.5ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule CVE-2000-03407.2Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.CVE-2000-03415.0ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.