PT-1999-1149 · Microsoft · Scriptlet+1

Published 1999-04-09 · Updated 2021-07-22 · CVE-1999-0468

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer version 5.0

Description The issue allows a remote server to read arbitrary files on the client's file system. This is achieved using the Microsoft Scriptlet Component.

Recommendations For Internet Explorer version 5.0, consider disabling the Microsoft Scriptlet Component as a temporary workaround until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-1999-0468

Affected Products

Internet Explorer

Scriptlet

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0468 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012 · Note