CVE-1999-0347

Published Feb 4, 2000 CVSS 2.0 · 10.0 Critical EPSS 7.5% KEV · Not listed
Description
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-0347 Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 4:34 PM
Reserved
Jun 7, 1999, 12:00 AM
Status
Modified
Published
Jan 26, 1999, 5:00 AM
Modified
Jun 16, 2026, 9:48 PM