CVE-2000-0266

None

CVSS

—

EPSS

16.2%

Published

Apr 18, 2000

CISA due date

—

The record

Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.

Affected packages

Ecosystem	Package	Introduced	Fixed