Lucene search
HistoryJun 02, 2000 - 4:00 a.m.
CVE-2000-0329
cve-2000-0329
microsoft
activex
remote attack
html mail
active setup control
vulnerability
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.7%
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the “Active Setup Control” vulnerability.
Affected configurations
Node
microsoftieMatch4.0windows_98
ORmicrosoftieMatch4.0windows_nt
ORmicrosoftieMatch4.0.1windows_95
ORmicrosoftieMatch4.0.1windows_98
ORmicrosoftieMatch4.0.1windows_nt
ORmicrosoftieMatch4.1windows_95
ORmicrosoftieMatch4.1windows_98
ORmicrosoftieMatch4.1windows_nt_4.0
ORmicrosoftieMatch5windows_nt_4.0
ORmicrosoftieMatch5.0windows_2000
ORmicrosoftieMatch5.0windows_95
ORmicrosoftieMatch5.0windows_98
ORmicrosoftinternet_explorerMatch4.0
ORmicrosoftoutlookMatch98
ORmicrosoftoutlookMatch2000
ORmicrosoftoutlook_expressMatch4.27.3110.1
ORmicrosoftoutlook_expressMatch4.72.2106.4
ORmicrosoftoutlook_expressMatch4.72.3120.0
ORmicrosoftoutlook_expressMatch4.72.3612.1700
ORmicrosoftoutlook_expressMatch5.0
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.7%
Related for CVE-2000-0329