CVE-2000-0464

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: May 17, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04655.1Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to rea CVE-2000-04667.2AIX cdmount allows local users to gain root privileges via shell metacharacters.CVE-2000-04677.2Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking func CVE-2000-04684.6man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.CVE-2000-04695.1Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-04707.5Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.CVE-2000-04717.2Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.CVE-2000-04723.6Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.CVE-2000-04737.5Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in t CVE-2000-04747.8Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource direc CVE-2000-04754.6Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vuln CVE-2000-04765.0xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be re