CVE-1999-0469
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Internet Explorer 5.0 allows window spoofing, enabling a remote attacker to spoof a legitimate website and capture information from the client.
Risk Assessment
This vulnerability poses a risk of user data theft, potentially leading to serious privacy and security breaches for the organization.
Recommendation
It is recommended to update the browser to a newer version and implement additional security measures to minimize the risk of window spoofing.
Other vulnerabilities in Internet Explorer 5.0
See all- CVE-2017-11913High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory.
- CVE-2017-11907High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows 10 and Windows Server 2016, allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11903High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11901High
Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 has a vulnerability that allows an attacker to gain the same user rights as the current user. The issue arises from how Internet Explorer handles objects in memory.
- CVE-2017-11869High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Microsoft browsers handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11856High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 (all versions up to 1709) and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory.
- CVE-2017-11855High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11822High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11813High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11810High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
Original NVD description (English source)
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.