low2.6Public exploit code
CVE-1999-0487
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 4/5 - DHTML Edit ActiveX Control File Stealing / Cross Frame Access1999-04-22 · remote · windows · Verified
Impact
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 4.0, 5.0 |