CVE-2000-0028: Microsoft Ie

Low severity, CVSS 2.6. EPSS: 23.1% chance of exploitation in the next 30 days.

Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.

Affected products

• Microsoft Ie: version 4.0 only
• Microsoft Internet Explorer: version 3.0 only; version 3.0.2 only; version 3.1 only; version 3.2 only; version 4.0 only; version 4.0.1 only; …

Published 1999-12-23. Last modified 2026-06-16.