Description
Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, which could allow remote attackers to execute arbitrary commands, aka the "IE Script" vulnerability.
References
- 20000627 FW: IE 5 and Access 2000 vulnerability - executing programs mailing-list
- 1398 vdb-entry
- MS00-049 vendor-advisory
- 20000627 IE 5 and Access 2000 vulnerability - executing programs mailing-list
- CA-2000-16 third-party-advisory