The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post.
References
Configurations
Information
Published : 2000-05-12 21:00
Updated : 2016-11-07 10:25
NVD link : CVE-2000-0400
Mitre link : CVE-2000-0400
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
microsoft
- internet_explorer