CVE-1999-0870

CVSS 2.0 Score 2.6 of 10 (low)

Details

Published Oct 1, 1998
Updated: Nov 20, 2024

Summary

CVE-1999-0870 is a vulnerability affecting Internet Explorer 4.01. An attacker can exploit this issue by pasting a file name into the browser's file upload control, enabling them to read arbitrary files on the targeted system. This vulnerability arises from the browser's lack of input validation, making it possible for untrusted data to manipulate file operations with potentially serious consequences. This issue was a significant concern during the late 1990s and early 2000s, as Internet Explorer was the dominant web browser at that time. Today, this vulnerability is considered historical, as Microsoft addressed it with subsequent patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft