The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking.
Metrics
Affected Vendors & Products
References
| Link | Providers |
|---|---|
| http://www.securityfocus.com/bid/1033 |
|
History
No history.
Status: PUBLISHED
Assigner: mitre
Published: 2000-04-10T04:00:00.000Z
Updated: 2024-08-08T05:05:54.113Z
Reserved: 2000-03-22T00:00:00.000Z
Link: CVE-2000-0201
No data.
Status : Deferred
Published: 2000-03-01T05:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2000-0201
No data.