CVE-2000-0439
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another...
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
- Record
CVE-2000-0439- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
- Record
CVE-2000-0439- Updated
- 2026-11-02
EUVDEUVD-2000-0438 No score
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
- Record
EUVD-2000-0438- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4rcm-2c69-4jh9 No score
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another...
Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in a URL, aka the "Unauthorized Cookie Access" vulnerability.
- Record
GHSA-4rcm-2c69-4jh9- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0439 is a low vulnerability (CVSS 2.6) in Microsoft Internet Explorer, published May 11, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.21%, the 93rd percentile. No source names a fixed version.
References
securityfocus.com/bid/1194
docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033
exchange.xforce.ibmcloud.com/vulnerabilities/4447
osvdb.org/1326