CVE-1999-0488
HighExploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the 'cross frame' vulnerability.
Risk Assessment
An attacker could exploit this vulnerability to take control of user sessions or steal data, posing a serious security threat to the organization.
Recommendation
It is recommended to update Internet Explorer to the latest version or consider switching to a more secure browser.
Other vulnerabilities in Internet Explorer 4.0, Internet Explorer 5.0
See all- CVE-2000-0439Low
Internet Explorer 4.0 and 5.0 allow a malicious website to obtain client cookies from another domain by including that domain name and escaped characters in a URL, known as the 'Unauthorized Cookie Access' vulnerability.
- CVE-1999-0871Low
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the 'Cross Frame Navigate' vulnerability.
Original NVD description (English source)
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.