CVE

Id
346  
CVE No.
CVE-1999-0347  
Status
Candidate  
Description
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.  
Phase
Modified (20051028)  
Votes
ACCEPT(4) Baker, LeBlanc, Levy, Northcutt | MODIFY(2) Frech, Prosser | REVIEWING(1) Christey  
Comments
Prosser> this is a modified Cross-Frame vulnerability that circumvents | the original Cross-Frame Patch. Addressed in MS Bulletin MS99.012 | http://www.microsoft.com/security/bulletins/ms99-012.asp | Christey> Duplicate of CVE-1999-0490? | LeBlanc> If Prosser is correct that this is MS99-012, accept | Christey> BUGTRAQ:19990126 Javascript ecurity bug in Internet Explorer | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=91745430007021&w=2 | NTBUGTRAQ:19990128 Javascript %01 bug in Internet Explorer | URL:http://marc.theaimsgroup.com/?l=ntbugtraq&m=91756771207719&w=2 | BID:197 | URL:http://www.securityfocus.com/bid/197 | CHANGE> [Frech changed vote from REVIEWING to MODIFY] | Frech> XF:ie-window-spoof(2069)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
718 346 CVE-1999-0347 BUGTRAQ:19990126 Javascript ecurity bug in Internet Explorer  View
719 346 CVE-1999-0347 URL:http://marc.info/?l=bugtraq&m=91745430007021&w=2  View
720 346 CVE-1999-0347 NTBUGTRAQ:19990126 Javascript ecurity bug in Internet Explorer  View

Related JVN