Vulnerabilities > CVE-1999-0347

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
critical
exploit available
NVD
Published: 1999-01-26
Updated: 2016-10-18

Summary

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.

Exploit-Db

descriptionMicrosoft Internet Explorer 5.0.1 Invalid Byte Cross-Frame Access Vulnerability. CVE-1999-0347. Remote exploit for windows platform
idEDB-ID:19156
last seen2016-02-02
modified1999-01-28
published1999-01-28
reporterGeorgi Guninski
sourcehttps://www.exploit-db.com/download/19156/
titleMicrosoft Internet Explorer 5.0.1 Invalid Byte Cross-Frame Access Vulnerability

References