CVE-2000-0464

CVE-2000-0464 describes a critical buffer overflow vulnerability in Microsoft Internet Explorer versions 4.x and 5.x, specifically within its ActiveX parameter parsing capability. This flaw, also known as the "Malformed Component Attribute" vulnerability, allows remote attackers to execute arbitrary commands on affected systems. With a CVSS score of 7.6 (HIGH), it presents a significant risk due to its network-based attack vector and potential for complete compromise of confidentiality, integrity, and availability, despite requiring high attack complexity. Although it has a high FAUCET Risk Score of 88/100, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.