CVE-1999-0490

CVE-1999-0490 describes an information disclosure vulnerability in Microsoft Internet Explorer 5.0, specifically within its MSHTML.DLL component. A remote attacker could exploit this flaw by crafting a malicious IMG SRC tag to gain unauthorized access to information about a local user's files. The vulnerability is rated as High severity (CVSS 7.5), indicating a low-complexity attack requiring no authentication, with potential impacts on confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decades-old vulnerability.