CVE Catalog

CVE-1999-1472

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
16.20%

97th percentile - higher than 97% of all known CVEs

Summary

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker.

Risk Assessment

Attackers may gain access to sensitive information stored on the user's computer, potentially leading to privacy breaches and data security issues.

Recommendation

It is recommended to update Internet Explorer to the latest version or consider using a different, more secure browser.

Original NVD description (English source)

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS