CVE-2000-0028

Description

Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.

Affected products

• microsoft / ie4.0 – 4.0
• microsoft / internet_explorer3.0 – 3.0
• microsoft / internet_explorer3.0.2 – 3.0.2
• microsoft / internet_explorer3.1 – 3.1
• microsoft / internet_explorer3.2 – 3.2
• microsoft / internet_explorer4.0 – 4.0
• microsoft / internet_explorer4.0.1 – 4.0.1
• microsoft / internet_explorer4.1 – 4.1
• microsoft / internet_explorer4.5 – 4.5
• microsoft / internet_explorer5.0 – 5.0
• microsoft / internet_explorer5.1 – 5.1

Exploits & proofs of concept

• exploit-dbMicrosoft Internet Explorer 4/5/5.5/5.0.1 - external.NavigateAndFind() Cross-Frameby Georgi Guninski

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0028