CVE-1999-0468

HighCVSS 8.2/10Last modified Jun 16, 2026

Description

Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Apr 9, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04695.0Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the cliCVE-1999-04705.0A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.CVE-1999-04715.0The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button.CVE-1999-04725.0The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.CVE-1999-04732.1The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the diCVE-1999-04745.0The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.CVE-1999-04751.2A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running CVE-1999-04767.2A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.CVE-1999-04777.5The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, whichCVE-1999-04795.0Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.CVE-1999-04802.1Local attackers can conduct a denial of service in Midnight Commander 4.x with a symlink attack.CVE-1999-04815.0Denial of service in "poll" in OpenBSD.