CVE-2000-0160: Microsoft Ie

High severity, CVSS 7.6. EPSS: 9.2% chance of exploitation in the next 30 days.

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.

Affected products

• Microsoft Ie: version 4.x only
• Microsoft Internet Explorer: version 5 only
• Microsoft Outlook: any version

Published 2000-02-21. Last modified 2026-06-16.