Skip to content
OpenAdvisories
Unscored CVE-1999-1087 EUVD-1999-1068GHSA-9rv3-rxw8-xr7c

Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to…

Published Mar 9, 2002 · Updated Aug 1, 2024 · Assigned by mitre

Description

Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.

References