CVE-2000-0503
https://notcve.org/view.php?id=CVE-2000-0503
The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event. • http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html http://www.securityfocus.com/bid/1311 •
CVE-2000-0518
https://notcve.org/view.php?id=CVE-2000-0518
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities. • http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt http://www.cert.org/advisories/CA-2000-10.html http://www.securityfocus.com/bid/1309 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039 https://exchange.xforce.ibmcloud.com/vulnerabilities/4624 •
CVE-2000-0519
https://notcve.org/view.php?id=CVE-2000-0519
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities. • http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt http://www.cert.org/advisories/CA-2000-10.html http://www.securityfocus.com/bid/1309 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039 https://exchange.xforce.ibmcloud.com/vulnerabilities/4627 •
CVE-2000-0465 – Microsoft Internet Explorer 4.0/5.0/5.5 preview/5.0.1 - DocumentComplete() Cross Frame Access
https://notcve.org/view.php?id=CVE-2000-0465
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability. • https://www.exploit-db.com/exploits/19939 http://www.microsoft.com/technet/support/kb.asp?ID=251108 http://www.microsoft.com/technet/support/kb.asp?ID=255676 http://www.securityfocus.com/bid/1224 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033 •
CVE-2000-0464
https://notcve.org/view.php?id=CVE-2000-0464
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability. • http://www.microsoft.com/technet/support/kb.asp?ID=261257 http://www.securityfocus.com/bid/1223 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033 •