CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site...
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
Exploit likelihood
What each source reports
NVD Score used
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
CVE-2000-1105- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
CVE-2000-1105- Updated
- 2026-11-02
EUVDEUVD-2000-1090No score
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
EUVD-2000-1090- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hrjf-28rx-wf7rNo score
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site...
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.
- Record
GHSA-hrjf-28rx-wf7r- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Indexing Service (Windows 2000) - File Verification | 2000-11-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-1105 is a medium vulnerability (CVSS 4.3) in Microsoft Indexing Service, published December 19, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.8%, the 95th percentile. No source names a fixed version.