Vulnerability in Microsoft Internet Explorer

CVE-1999-1110

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.

EPSS: 0.098 (95.0th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

  • cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)

Frequently asked questions

What is CVE-1999-1110?
CVE-1999-1110 is a vulnerability in Microsoft Internet Explorer. Published 1999-11-14.
Is CVE-1999-1110 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.