CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site...
CVE-2000-1105 is a medium vulnerability (CVSS 4.3) in Microsoft Indexing Service, published December 19, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.8%, the 95th percentile. No source names a fixed version.
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
Exploit likelihood
What each source reports
NVD Score used
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
CVE-2000-1105- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
CVE-2000-1105- Updated
- 2026-11-02
EUVDEUVD-2000-1090 No score
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
EUVD-2000-1090- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hrjf-28rx-wf7r No score
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site...
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
GHSA-hrjf-28rx-wf7r- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Indexing Service (Windows 2000) - File Verification | 2000-11-10 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |