4.6med
CVE-2000-0790
The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 72%
Public exploits
0
none known
Summary
The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file that is listed in the folder.
Exploit prediction (EPSS)
1.39% probability of exploitation in the next 30 days, higher than 72% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/5097 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/1571 · vdb-entry, x_refsource_BID, x_transferred
- securityfocus.com /templates/archive.pike?list=1&msg=3998370D.732A03F1%40nat.bg · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2000-0790
- NVD: CVE-2000-0790
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.