CVE-1999-1110

Medium

Published: 14/11/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.82%

95th percentile - higher than 95% of all known CVEs

Summary

The Windows Media Player ActiveX object used in Internet Explorer 5.0 returns a specific error code when a file does not exist, allowing remote malicious websites to determine the existence of files on the client.

Risk Assessment

This vulnerability allows attackers to identify files on the user's device, potentially leading to further attacks or data leaks.

Recommendation

It is recommended to update Internet Explorer to a newer version and to limit the use of ActiveX to minimize risk.

Original NVD description (English source)

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.