What’s Vulnerable › Vulnerabilities

CVE-1999-0347

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 1999-01-26 · updated 2026-06-16

Description

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.

References

• http://marc.info/?l=bugtraq&m=91745430007021&w=2
• http://marc.info/?l=ntbugtraq&m=91756771207719&w=2
• http://marc.info/?l=bugtraq&m=91745430007021&w=2
• http://marc.info/?l=ntbugtraq&m=91756771207719&w=2

Get alerted when CVE-1999-0347 or the next vulnerability affects your stack