CVE-1999-0487

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-04887.5Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a vCVE-1999-048910.0MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrCVE-1999-04907.5MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.CVE-1999-04914.6The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to eCVE-1999-049210.0The ffingerd 1.19 allows remote attackers to identify users on the target system based on its responses.CVE-1999-04937.5rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn coCVE-1999-049510.0A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.CVE-1999-04970.0Anonymous FTP is enabled.CVE-1999-051210.0A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.CVE-1999-051510.0An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.CVE-1999-05206.4A system-critical NETBIOS/SMB share has inappropriate access control.CVE-1999-05230.0ICMP echo (ping) is allowed from arbitrary hosts.
CVE-1999-0487: Low severity, CVSS 2.6 | Vulnix