CVE-2000-0465

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-05-17 · updated 2026-06-16

Description

Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.

Affected products

Microsoft Internet Explorer 11: 4.0, 5.0, 5.01, 5.5-preview

References

http://www.microsoft.com/technet/support/kb.asp?ID=251108
http://www.microsoft.com/technet/support/kb.asp?ID=255676
http://www.securityfocus.com/bid/1224
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033
http://www.microsoft.com/technet/support/kb.asp?ID=251108
http://www.microsoft.com/technet/support/kb.asp?ID=255676
http://www.securityfocus.com/bid/1224
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033

Get alerted when CVE-2000-0465 or the next vulnerability affects your stack