CVE-2000-0400

The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download any type of file to a user’s system by encoding it within an email message or news post.

Date published : 2000-06-15

http://www.securityfocus.com/bid/1221

http://marc.info/?l=bugtraq&m=95868514521257&w=2