CVE-1999-1472
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's...
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
- Record
CVE-1999-1472- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
- Record
CVE-1999-1472- Updated
- 2026-11-02
EUVDEUVD-1999-1453 No score
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
- Record
EUVD-1999-1453- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-86r9-xq76-hv9m No score
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's...
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker, aka the Freiburg text-viewing issue.
- Record
GHSA-86r9-xq76-hv9m- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1472 is a medium vulnerability (CVSS 5.0) in Microsoft Internet Explorer, published December 31, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 17.1%, the 97th percentile. No source names a fixed version.
References
microsoft.com/Windows/ie/security/freiburg.asp
osvdb.org/7819
support.microsoft.com/support/kb/articles/q176/7/94.asp
marc.info?l=bugtraq&m=87710897923098&w=2
exchange.xforce.ibmcloud.com/vulnerabilities/587
insecure.org/sploits/Internet_explorer_4.0.hack.html
nvd.nist.gov/vuln/detail/CVE-1999-1472
github.com/advisories/GHSA-86r9-xq76-hv9m