CVE-2000-1105

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-01-09 · updated 2026-06-16

Description

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.

Affected products

Microsoft Indexing Service: all versions

References

http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html
http://www.securityfocus.com/archive/1/144270
http://www.securityfocus.com/bid/1933
http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0074.html
http://www.securityfocus.com/archive/1/144270
http://www.securityfocus.com/bid/1933

Get alerted when CVE-2000-1105 or the next vulnerability affects your stack