CVE-1999-1110

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.

Affected products

Internet Explorer, Windows Media Player

Microsoft Internet Explorer

= 5.0

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

9.8% (95th percentile)

NVD status

Modified

Published

2001-09-12