Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1110. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit demonstrates an information leakage vulnerability in the Windows Media Player ActiveX control shipped with Internet Explorer 5.0. By attempting to load a local file and checking the returned error code, an attacker can determine whether the file exists on the victim's system.
Description
Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.
Exploits (1)
This exploit demonstrates an information leakage vulnerability in the Windows Media Player ActiveX control shipped with Internet Explorer 5.0. By attempting to load a local file and checking the returned error code, an attacker can determine whether the file exists on the victim's system.