CVE-1999-1110: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 9.8% chance of exploitation in the next 30 days.

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.

Affected products

• Microsoft Internet Explorer: version 5.0 only

Published 1999-11-14. Last modified 2026-06-16.