CVE-2000-0768

Low CVSS 2.6

Published 2000-10-20 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-2000-0768, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.

Sources

NVD record for CVE-2000-0768

CVSS vector: AV:N/AC:H/Au:N/C:P/I:N/A:N