Lucene search

[email protected]CVE-1999-0870

HistoryOct 01, 1998 - 4:00 a.m.

CVE-1999-0870

1998-10-0104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

internet explorer

ie 4.01

remote attack

cve-1999-0870

file read

untrusted script

7.5 High

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.032 Low

EPSS

Percentile

91.1%

JSON

Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq4.0.1

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	4.0.1

References

docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-015

7.5 High

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.032 Low

EPSS

Percentile

91.1%

JSON

Related for CVE-1999-0870

cvelist1