CVE-1999-0487

CVSS 2.0 Score 2.6 of 10 (low)

Details

Published May 1, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0487 is a vulnerability affecting the DHTML Edit ActiveX control in Internet Explorer. Malicious actors can exploit this issue to read arbitrary files on a target system, posing a significant threat to data confidentiality. The flaw occurs due to inadequate input validation, allowing remote attackers to access files outside the intended scope. This vulnerability was first identified in 1999 and remains a concern for older versions of Internet Explorer that have not been properly patched. Users are advised to update their browsers or employ alternative software to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft