{"id": "CVE-1999-0468", "bulletinFamily": "NVD", "title": "CVE-1999-0468", "description": "Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.", "published": "1999-04-09T04:00:00", "modified": "2018-10-12T21:29:00", "cvss": {"score": 2.6, "vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-1999-0468", "reporter": "cve@mitre.org", "references": ["https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-012"], "cvelist": ["CVE-1999-0468"], "type": "cve", "lastseen": "2019-05-29T18:07:36", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "7881bf0af3735bf7902a428d3ccbf97f"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "ab74b8ebab2944527db0b9c6d2838b9d"}, {"key": "cpe23", "hash": "301661d9d606e8484353fdbe09d4058c"}, {"key": "cvelist", "hash": "77aa9d2447f62c609bde2cae0dc2b406"}, {"key": "cvss", "hash": "a4e8ab6449ecd0e1c0804a2fa5b0ec9b"}, {"key": "cvss2", "hash": "1f2a15cfd7ea368b8697922332454f47"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "1be25557110594dfdd4c7b55f33b9a31"}, {"key": "href", "hash": "adc587c89915c05b6d9cb2164a56351b"}, {"key": "modified", "hash": "6f27c7642e829646db858144e800572e"}, {"key": "published", "hash": "b4aaae7325c4f3d1254842fddba01f53"}, {"key": "references", "hash": "304f373cb71706ca089fcfc5c789f3b7"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "14f34b0386b4a7f664e26e18d27fca58"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "db32df32bbebb26553d52806831019763146d052f4e92fc63228facffd476a5d", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "osvdb", "idList": ["OSVDB:7841", "OSVDB:5965"]}], "modified": "2019-05-29T18:07:36"}, "score": {"value": 4.6, "vector": "NONE", "modified": "2019-05-29T18:07:36"}, "vulnersScore": 4.6}, "objectVersion": "1.3", "cpe": ["cpe:/a:microsoft:ie:5.0"], "affectedSoftware": [{"name": "microsoft ie", "operator": "eq", "version": "5.0"}], "cvss2": {"cvssV2": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "LOW", "userInteractionRequired": true}, "cvss3": {}, "cpe23": ["cpe:2.3:a:microsoft:ie:5.0:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}

{"osvdb": [{"lastseen": "2017-04-28T13:20:02", "bulletinFamily": "software", "description": "# No description provided by the source\n\n## References:\nMicrosoft Security Bulletin: MS99-012\nMicrosoft Knowledge Base Article: 226325\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/1999_2/0072.html\nISS X-Force ID: 2070\n[CVE-1999-0468](https://vulners.com/cve/CVE-1999-0468)\nBugtraq ID: 117\n", "modified": "1999-04-09T00:00:00", "published": "1999-04-09T00:00:00", "id": "OSVDB:7841", "href": "https://vulners.com/osvdb/OSVDB:7841", "title": "Microsoft IE Scriptlet Component Arbitrary File Access", "type": "osvdb", "cvss": {"score": 2.6, "vector": "AV:NETWORK/AC:HIGH/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2017-04-28T13:20:00", "bulletinFamily": "software", "description": "## Vulnerability Description\nMicrosoft Internet Explorer contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious HTML file contains an IMG SRC tag that doesn't point to an image file. The document object model of Internet Explorer can then be exploited to reveil information not otherwise available leading to a loss of confidentiality.\n## Solution Description\nUpgrade to version 6.0 or higher, as it has been reported to fix this vulnerability. Microsoft has also released a patch to address this issue.\n## Short Description\nMicrosoft Internet Explorer contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious HTML file contains an IMG SRC tag that doesn't point to an image file. The document object model of Internet Explorer can then be exploited to reveil information not otherwise available leading to a loss of confidentiality.\n## References:\nMicrosoft Security Bulletin: MS99-012\nMicrosoft Knowledge Base Article: 226325\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/1999_2/0072.html\nKeyword: MS99-012 Q226325 KB226325\nISS X-Force ID: 2070\n[CVE-1999-0468](https://vulners.com/cve/CVE-1999-0468)\n[CVE-1999-0490](https://vulners.com/cve/CVE-1999-0490)\nBugtraq ID: 117\n", "modified": "1999-04-21T00:00:00", "published": "1999-04-21T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:5965", "id": "OSVDB:5965", "type": "osvdb", "title": "Microsoft IE MSHTML.DLL Information Disclosure", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}