Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the Malformed Component Attribute vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_explorer | Microsoft | 4.0.1 (including) | 4.0.1 (including) |
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
References
- http://www.microsoft.com/technet/support/kb.asp?ID=261257
- http://www.securityfocus.com/bid/1223
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033
- http://www.microsoft.com/technet/support/kb.asp?ID=261257
- http://www.securityfocus.com/bid/1223
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033