CVE-1999-1472

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 17.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-03-09 · updated 2026-06-16

Description

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.

Affected products

Microsoft Internet Explorer 11: 4.0

References

http://marc.info/?l=bugtraq&m=87710897923098&w=2
http://support.microsoft.com/support/kb/articles/q176/6/97.asp
http://support.microsoft.com/support/kb/articles/q176/7/94.asp
http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html
http://www.microsoft.com/Windows/ie/security/freiburg.asp
http://www.osvdb.org/7819
https://exchange.xforce.ibmcloud.com/vulnerabilities/587
http://marc.info/?l=bugtraq&m=87710897923098&w=2
http://support.microsoft.com/support/kb/articles/q176/6/97.asp
http://support.microsoft.com/support/kb/articles/q176/7/94.asp
http://www.insecure.org/sploits/Internet_explorer_4.0.hack.html
http://www.microsoft.com/Windows/ie/security/freiburg.asp

Get alerted when CVE-1999-1472 or the next vulnerability affects your stack