PT-1999-1036 · Microsoft · Internet Explorer

Publicado 1999-01-26 · Atualizado 2016-10-18 · CVE-1999-0347

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer version 4.01

Description The issue allows remote attackers to read local files and spoof web pages. This is achieved by using a "%01" character in an "about:" Javascript URL, causing the browser to use the domain specified after the character.

Recommendations For Internet Explorer version 4.01, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-1999-0347

Produtos afetados

Internet Explorer

Referências · 4

• 🔥 https://exploit-db.com/exploits/19156 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0347 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=91745430007021&w=2 · Nota
• http://marc.info/?l=ntbugtraq&m=91756771207719&w=2 · Nota