Lucene search

K
cve[email protected]CVE-1999-0489
HistoryFeb 04, 2000 - 5:00 a.m.

CVE-1999-0489

2000-02-0405:00:00
web.nvd.nist.gov
40
cve-1999-0489
mshtml.dll
internet explorer 5.0
remote attack
file upload control
untrusted scripted paste
ms:ms98-013
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of “untrusted scripted paste” as described in MS:MS98-013.

Affected configurations

NVD
Node
microsoftwindows_ntMatch4.0

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

Related for CVE-1999-0489