PT-1999-1036 · Microsoft · Internet Explorer

Published 1999-01-26 · Updated 2016-10-18 · CVE-1999-0347

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer version 4.01

Description The issue allows remote attackers to read local files and spoof web pages. This is achieved by using a "%01" character in an "about:" Javascript URL, causing the browser to use the domain specified after the character.

Recommendations For Internet Explorer version 4.01, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-1999-0347

Affected Products

Internet Explorer

References · 4

• 🔥 https://exploit-db.com/exploits/19156 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0347 · Security Note
• http://marc.info/?l=bugtraq&m=91745430007021&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=91756771207719&w=2 · Note