CVE-2000-0518
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a...
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
- Record
CVE-2000-0518- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
- Record
CVE-2000-0518- Updated
- 2026-11-02
EUVDEUVD-2000-0515 No score
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
- Record
EUVD-2000-0515- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g344-mjvh-jcp5 No score
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a...
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
- Record
GHSA-g344-mjvh-jcp5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0518 is a low vulnerability (CVSS 2.6) in Microsoft Ie, published June 5, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.83%, the 92nd percentile. No source names a fixed version.
References
acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
exchange.xforce.ibmcloud.com/vulnerabilities/4624
cert.org/advisories/CA-2000-10.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039
securityfocus.com/bid/1309
nvd.nist.gov/vuln/detail/CVE-2000-0518
github.com/advisories/GHSA-g344-mjvh-jcp5