CVEvulnerability
CVE-1999-1087
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 1999-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.
Affected configurations
• microsoft internet explorer 4.0
• microsoft internet explorer 4.0.1
References
- http://support.microsoft.com/support/kb/articles/q168/6/17.asp Patch, Vendor Advisory
- http://www.microsoft.com/Windows/Ie/security/dotless.asp www.microsoft.com
- http://www.osvdb.org/7828 www.osvdb.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2209 exchange.xforce.ibmcloud.com
- http://support.microsoft.com/support/kb/articles/q168/6/17.asp Patch, Vendor Advisory
- http://www.microsoft.com/Windows/Ie/security/dotless.asp www.microsoft.com
- http://www.osvdb.org/7828 www.osvdb.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2209 exchange.xforce.ibmcloud.com