PT-1999-1579 · Microsoft · Internet Explorer+1

Publicado 1999-11-14 · Atualizado 2021-07-22 · CVE-1999-1110

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Media Player ActiveX object as used in Internet Explorer version 5.0

Description The issue allows remote malicious web sites to determine the existence of files on the client by exploiting the Windows Media Player ActiveX object in Internet Explorer. This is possible because the object returns a specific error code when a file does not exist.

Recommendations For Internet Explorer version 5.0, consider disabling the Windows Media Player ActiveX object until a patch is available to prevent remote malicious web sites from determining the existence of files on the client.

Exploit

Correção

Identificadores relacionados

CVE-1999-1110

Produtos afetados

Internet Explorer

Windows Media Player

Referências · 4

• 🔥 https://exploit-db.com/exploits/19618 · Exploit
• 🔥 http://securityfocus.com/bid/793 · Exploit
• 🔥 http://securityfocus.com/archive/1/34675 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1110 · Nota de Segurança