CVE Catalog
CVE-1999-0725
HighExploitation Probability (EPSS)
Very high risk24.85%
98th percentile - higher than 98% of all known CVEs
Summary
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, known as 'Double Byte Code Page'.
Risk Assessment
The ability to expose source code may lead to further attacks on the system, including data theft or the introduction of malicious code.
Recommendation
It is recommended to change the default language to English or another language that is not vulnerable to this issue, and to monitor server access.
Original NVD description (English source)
When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".