CVE-1999-0981

Medium

Published: 08/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.12%

96th percentile - higher than 96% of all known CVEs

Summary

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window.

Risk Assessment

An attacker could gain access to sensitive local data of the user, posing a serious threat to information security.

Recommendation

It is recommended to update Internet Explorer to the latest version or consider using an alternative browser.

Original NVD description (English source)

Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."