CVE-1999-1110

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.

• http://www.securityfocus.com/archive/1/34675Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/793Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/34675Exploit, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/793Exploit, Patch, Vendor Advisory

Published

Nov 14, 1999

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-1999-1100Cisco PIX Private Link 4.1.6 and earlier does not properly p…
• CVE-1999-1101Kabsoftware Lydia utility uses weak encryption to store user…
• CVE-1999-1102lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based…
• CVE-1999-1104Windows 95 uses weak encryption for the password list (.pwl)…
• CVE-1999-1105Windows 95, when Remote Administration and File Sharing for …
• CVE-1999-1109Sendmail before 8.10.0 allows remote attackers to cause a de…
• CVE-1999-1111Vulnerability in StackGuard before 1.21 allows remote attack…
• CVE-1999-1112Buffer overflow in IrfanView32 3.07 and earlier allows attac…
• CVE-1999-1117lquerypv in AIX 4.1 and 4.2 allows local users to read arbit…
• CVE-1999-1124HTTP Client application in ColdFusion allows remote attacker…
• CVE-1999-1126Cisco Resource Manager (CRM) 1.1 and earlier creates certain…
• CVE-1999-1127Windows NT 4.0 does not properly shut down invalid named pip…7.5