CVE-1999-0981
Internet Explorer < 5.01 - Local File Access via Server-side Page Reference Redirect
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-0981. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages a vulnerability in older versions of Internet Explorer and Outlook where window.open can be used to redirect to a local file, allowing the contents of the file to be read or manipulated. The PoC demonstrates how an attacker could access local files if the filename and location are known.
Description
Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Server-side Page Reference Redirect."
Exploits (1)
This exploit leverages a vulnerability in older versions of Internet Explorer and Outlook where window.open can be used to redirect to a local file, allowing the contents of the file to be read or manipulated. The PoC demonstrates how an attacker could access local files if the filename and location are known.