Every CVE Search/ Get API key

CVE-2000-0464

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer...

7.6 High

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Exploit likelihood

13.3%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.6

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Record
CVE-2000-0464
CVSS 2.0
7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Record
CVE-2000-0464
Updated
2026-11-02
EUVDEUVD-2000-0463 No score

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Record
EUVD-2000-0463
Updated
2026-11-03
GitHub AdvisoriesGHSA-p267-cj3r-wj88 No score

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer...

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Record
GHSA-p267-cj3r-wj88
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0464 is a high vulnerability (CVSS 7.6) in Microsoft Internet Explorer, published May 17, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.3%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open