CVE-1999-0871
LowExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the 'Cross Frame Navigate' vulnerability.
Risk Assessment
This vulnerability may lead to unauthorized access to sensitive user data, posing a significant security threat to the organization.
Recommendation
It is recommended to update Internet Explorer to a newer version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Internet Explorer 4.0, Internet Explorer 4.01
See all- CVE-2000-0439Low
Internet Explorer 4.0 and 5.0 allow a malicious website to obtain client cookies from another domain by including that domain name and escaped characters in a URL, known as the 'Unauthorized Cookie Access' vulnerability.
- CVE-1999-0488High
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the 'cross frame' vulnerability.
Original NVD description (English source)
Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS