CVE-1999-1087: Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address,
Summary
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to apply Local Intranet Zone settings to the resulting web page, allowing remote malicious web servers to conduct unauthorized activities by using URLs that contain the dotless IP address for their server.
Severity
UNKNOWN
Source Attribution
Source: NVD · Updated: 2026-08-21T04:30:52.736Z · Confidence: high
Impact
Based on CVSS vector: n/a — assess confidentiality, integrity, and availability impact via the official vector documentation.
Affected Software
Fix
Upgrade affected software to the fixed version identified above. Apply vendor patches and monitor advisories before exposed systems go unpatched.
References
- http://support.microsoft.com/support/kb/articles/q168/6/17.asp
- http://www.microsoft.com/Windows/Ie/security/dotless.asp
- http://www.osvdb.org/7828
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2209
- http://support.microsoft.com/support/kb/articles/q168/6/17.asp
- http://www.microsoft.com/Windows/Ie/security/dotless.asp
- http://www.osvdb.org/7828
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-016
- https://exchange.xforce.ibmcloud.com/vulnerabilities/2209