CVE-2000-0464: Microsoft Internet Explorer

High severity, CVSS 7.6. EPSS: 13.3% chance of exploitation in the next 30 days.

Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.

Affected products

• Microsoft Internet Explorer: version 4.0 only; version 4.0.1 only; version 5.0 only; version 5.01 only

Published 2000-05-17. Last modified 2026-06-16.