PT-1999-1579 · Microsoft · Internet Explorer+1

Published 1999-11-14 · Updated 2021-07-22 · CVE-1999-1110

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Media Player ActiveX object as used in Internet Explorer version 5.0

Description The issue allows remote malicious web sites to determine the existence of files on the client by exploiting the Windows Media Player ActiveX object in Internet Explorer. This is possible because the object returns a specific error code when a file does not exist.

Recommendations For Internet Explorer version 5.0, consider disabling the Windows Media Player ActiveX object until a patch is available to prevent remote malicious web sites from determining the existence of files on the client.

Exploit

Fix

Related Identifiers

CVE-1999-1110

Affected Products

Internet Explorer

Windows Media Player

References · 4

• 🔥 https://exploit-db.com/exploits/19618 · Exploit
• 🔥 http://securityfocus.com/bid/793 · Exploit
• 🔥 http://securityfocus.com/archive/1/34675 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1110 · Security Note