Vulnerability record · CVE-1999-0347 · published 26 January 1999
CVE-1999-0347: Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character i…
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
Description
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use the domain specified after the character.
AV:N/AC:L/Au:N/C:C/I:C/A:C
References
Track CVE-1999-0347 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-1999-0347), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
