CVE-1999-0870: Microsoft Internet Explorer

Low severity, CVSS 2.6. EPSS: 12.8% chance of exploitation in the next 30 days.

Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.

Affected products

• Microsoft Internet Explorer: version 4.0.1 only

Published 1998-10-01. Last modified 2026-06-16.