Microsoft Signed ActiveX Active安装漏洞

漏洞信息详情

Microsoft Signed ActiveX Active安装漏洞

• CNNVD编号：CNNVD-200002-060
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2000-0160
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2000-02-21
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Posted to Bugtraq …

Internet Explorer 4.x 版本和5.x版本中The Microsoft Active Setup ActiveX组件存在漏洞。远程攻击者在没有提示软件的生产商为Microsoft时可以安装软件组件。

Microsoft has made patches available which eliminates this vulnerability, available at the following location:
http://www.microsoft.com/windows/ie/download/critical/patch8.htm

来源: BUGTRAQ
名称: 20000221 Microsoft signed software can be install software without prompting users
链接:http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000221103938.T21312@securityfocus.com