CVE-1999-0858

CVSS 2.0 Score 5 of 10 (medium)

Details

Published Dec 2, 1999
Updated: Nov 20, 2024
CWE ID 16

Summary

CVE-1999-0858 refers to a vulnerability in Internet Explorer 5 that allows a remote attacker to manipulate the browser's proxy settings. This can be accomplished through a maliciously configured Web Proxy Auto-Discovery (WPAD) server. An attacker could exploit this vulnerability to redirect users to malicious websites or intercept their internet traffic. This security flaw poses a significant risk to users who visit untrusted websites or open emails with embedded links. To mitigate this vulnerability, users should ensure their WPAD configuration is secure or disable the WPAD feature entirely. Additionally, keeping Internet Explorer and all software up-to-date is crucial to maintaining a secure computing environment.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft