CVE-1999-1446: Low severity Microsoft Internet Explorer vulnerability
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Open Folder Options (View tab) and enable 'Show hidden files and folders' and disable 'Hide protected operating system files' so the .DAT files in Temporary Internet Files and History folders become visible.
Windows Explorer / Folder Options Show hidden and protected files = Show hidden files and system files - Operational
Manually locate and delete the .DAT files that store URL history from each user's Temporary Internet Files and History folders to fully clear recorded browsing history (perform after enabling viewing of hidden/system files). Repeat for each affected user profile.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1446?
CVE-1999-1446 is classified as a moderate security vulnerability due to the potential exposure of user browsing history.
How does CVE-1999-1446 affect Internet Explorer 3 users?
CVE-1999-1446 affects Internet Explorer 3 by retaining a history of visited URLs in files that are not cleared even when the user attempts to clear their history.
What steps can be taken to mitigate CVE-1999-1446?
To mitigate CVE-1999-1446, users should manually delete the DAT files from the Temporary Internet Files and History folders.
Is there a patch available for CVE-1999-1446?
There is no official patch available for CVE-1999-1446 since Internet Explorer 3 is an obsolete version of the browser.
What should I do if I am still using Internet Explorer 3 in light of CVE-1999-1446?
If using Internet Explorer 3, it is highly recommended to upgrade to a modern web browser to avoid security vulnerabilities like CVE-1999-1446.