CVE-2000-0400

— CWE-20

EPSS 0.16347
  • Published: 2000-05-13T04:00:00.000
  • Last modified: 2025-04-03T01:03:51.193
  • CWE: CWE-20

CVE-2000-0400 — The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user's system by encoding it within an email message or news post. [Weakness: CWE-20]

Related CVE by CWE

No closely related CVE found.

Risk snapshot

EPSS: n/a   |   KEV: not listed

Related CVE by CWE

No related CWE found.

Top CVE for Vendor

No vendor taxonomy on this entry.

Recently Exploited Similar Vulnerabilities

No recent KEV-listed items for this vendor/product.

The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user’s system by encoding it within an email message or news post.

🧠 Explainer: What this vulnerability means

Summary: The issue in the product by the vendor (CWE: unspecified) may enable attacks.

Impact: Potential impact includes remote code execution, data theft, or denial of service.

Mitigation: Apply the latest vendor patch or update to a fixed version; disable vulnerable modules where possible.

CWE: CWE-20

No vendor/product data yet.

No explicit mitigation/advisory links found in references.