CVE-1999-0487
CVSS 2.0 Score 2.6 of 10 (low)
Details
Summary
CVE-1999-0487 is a vulnerability affecting the DHTML Edit ActiveX control in Internet Explorer. Malicious actors can exploit this issue to read arbitrary files on a target system, posing a significant threat to data confidentiality. The flaw occurs due to inadequate input validation, allowing remote attackers to access files outside the intended scope. This vulnerability was first identified in 1999 and remains a concern for older versions of Internet Explorer that have not been properly patched. Users are advised to update their browsers or employ alternative software to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Internet Explorer
Affected Vendors
- Microsoft