CVE Catalog
CVE-1999-0347
HighExploitation Probability (EPSS)
Very high risk7.46%
94th percentile - higher than 94% of all known CVEs
Summary
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
Risk Assessment
Attackers can gain access to sensitive local data and mislead users, potentially leading to data theft or malicious activities.
Recommendation
It is recommended to update Internet Explorer to the latest version and avoid using unknown or suspicious links.
Original NVD description (English source)
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.