CVE-2000-0162: Microsoft Ie

Medium severity, CVSS 5.1. EPSS: 7.6% chance of exploitation in the next 30 days.

The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.

Affected products

• Microsoft Ie: version 4.0 only; version 4.1 only; version 5 only; version 5.0 only
• Microsoft Internet Explorer: version 4.0 only
• Microsoft Visual Studio: version 6.0 only

Published 2000-02-18. Last modified 2026-06-16.