CVE-1999-0487

CVSS 2.0 Score 2.6 of 10 (low)

Details

Published May 1, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0487 is a vulnerability affecting the DHTML Edit ActiveX control in Internet Explorer. An attacker can exploit this flaw to read arbitrary files on a vulnerable system remotely. This vulnerability poses a significant risk as it allows unauthorized access to sensitive data. Exploitation typically involves convincing a user to visit a malicious website or open a specially crafted file. Once exploited, the attacker can gain access to system files, potentially leading to data theft or system compromise. Users are strongly advised to update their Internet Explorer software to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft