CVE-1999-0489

High

Published: 17/05/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

12.45%

96th percentile - higher than 96% of all known CVEs

Summary

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of 'untrusted scripted paste'.

Risk Assessment

An attacker could exploit this vulnerability to upload malicious files, potentially compromising the user's system.

Recommendation

It is recommended to update Internet Explorer to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013.