CVE-2000-0329: microsoft ie
Vulnerability summary
CVE-2000-0329 is a medium (CVSS 5.1) vulnerability in microsoft ie. EPSS estimates a 7.69% chance of exploitation in the next 30 days, higher than 94.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 02-06-2000PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.69%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
0.00 pp
From 7.69% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Internet Explorer 4.x/5 / Outlook 2000 0/98 0/Express 4.x - ActiveX '.CAB' File Execution
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft4 products
- ie4.0 | 4.0.1 | 4.1 | 5 | 5.0
- internet_explorer4.0
- outlook98 | 2000
- outlook_express4.27.3110.1 | 4.72.2106.4 | 4.72.3120.0 | 4.72.3612.1700 | 5.0
1 vendor · 4 products
References
1 links
docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048Vendor AdvisoryX Refsource MS