CVE-2000-0329

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.

Affected products

Activex

Microsoft Ie

= 4.0, 4.0.1, 4.1, 5, 5.0

Microsoft Internet Explorer

= 4.0

Microsoft Outlook

= 98, 2000

Microsoft Outlook Express

= 4.27.3110.1, 4.72.2106.4, 4.72.3120.0, 4.72.3612.1700, 5.0

CVSS 2.0

5.1 MEDIUM

EPSS

7.7% (94th percentile)

NVD status

Modified

Published

2000-06-02