CVE-1999-0871: Microsoft Internet Explorer

Low severity, CVSS 2.6. EPSS: 12.1% chance of exploitation in the next 30 days.

Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.

Affected products

• Microsoft Internet Explorer: version 4.0 only; version 4.0.1 only

Published 1998-09-04. Last modified 2026-06-16.