CVE-1999-1447

Medium

Published: 28/07/1998(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.45%

96th percentile - higher than 96% of all known CVEs

Summary

Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.

Risk Assessment

Attackers can exploit this vulnerability to disrupt application functionality, potentially leading to downtime in the organization's web services.

Recommendation

It is recommended to update Internet Explorer to a newer version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.