CVE-1999-0468 Information disclosure in n/a
Remote attackers can read arbitrary files on the client's file system via the Microsoft Scriptlet Component in Internet Explorer.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0468?
CVE-1999-0468 is a high-severity vulnerability in Microsoft Internet Explorer, published on 29 Sep 1999. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
Weakness: CWE-200
Which versions are affected by CVE-1999-0468?
It affects 1 product.
Products include Microsoft Internet Explorer.
How do I fix CVE-1999-0468?
No fix has been published for CVE-1999-0468 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-0468 being exploited?
There is no known exploitation of CVE-1999-0468 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Internet Explorer
- CVE-2014-1776 Microsoft Internet Explorer Memory Corruption
- CVE-2021-27085 Microsoft Internet Explorer Remote Code Execution
- CVE-2017-0222 Microsoft Internet Explorer Remote Code Execution
- CVE-2017-0210 Microsoft Internet Explorer Privilege Escalation
- CVE-2017-0149 Microsoft Internet Explorer Memory Corruption
Sources
Also known as GHSA-qx62-xr98-6mvc.