CVE-1999-0827
UnknownEPSS 4.69%
Last modified
CVE-1999-0827 is a vulnerability of currently unknown severity. By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.. EPSS estimates a 4.69% chance of exploitation in the next 30 days.
Description
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Ie | 4.0 | A Mac Os |
| Microsoft | Internet Explorer | 3.0 | — |
| Microsoft | Internet Explorer | 3.0.2 | — |
| Microsoft | Internet Explorer | 3.1 | — |
| Microsoft | Internet Explorer | 3.2 | — |
| Microsoft | Internet Explorer | 4.0 | — |
| Microsoft | Internet Explorer | 4.0.1 | Sp2 |
| Microsoft | Internet Explorer | 4.1 | — |
| Microsoft | Internet Explorer | 4.5 | — |
| Microsoft | Internet Explorer | 5.0 | — |
| Netscape | Navigator | <= 4.5 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-1999-0827?
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
How severe is CVE-1999-0827?
Severity scoring for CVE-1999-0827 is pending analysis. The EPSS model estimates a 4.69% probability of exploitation in the next 30 days.
How do I fix CVE-1999-0827?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 1999
- CVE-1999-0821FreeBSD seyon allows local users to gain privileges by provi…
- CVE-1999-0822Buffer overflow in Qpopper (qpop) 3.0 allows remote root acc…
- CVE-1999-0823Buffer overflow in FreeBSD xmindpath allows local users to g…
- CVE-1999-0824A Windows NT user can use SUBST to map a drive letter to a f…
- CVE-1999-0825The default permissions for UnixWare /var/mail allow local u…
- CVE-1999-0826Buffer overflow in FreeBSD angband allows local users to gai…
- CVE-1999-0828UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam …
- CVE-1999-0829HP Secure Web Console uses weak encryption.
- CVE-1999-0830Buffer overflow in SCO UnixWare Xsco command via a long argu…
- CVE-1999-0831Denial of service in Linux syslogd via a large number of con…
- CVE-1999-0832Buffer overflow in NFS server on Linux allows attackers to e…
- CVE-1999-0833Buffer overflow in BIND 8.2 via NXT records.
Are you affected by CVE-1999-0827?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST