CVE-1999-0725

CVE Database · CVE-1999-0725

CVE-1999-0725

· N/AModified

CVSS v3.1

N/A

EPSS

24.85%

Published

Aug 19, 1999

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBMicrosoft IIS 3.0/4.0 - Double Byte Code Page

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page".

Weaknesses (CWE)

CWE-16

Affected Products (6)

microsoft · internet_information_servervulnerable

References (8)

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335

http://www.securityfocus.com/bid/477

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022

https://exchange.xforce.ibmcloud.com/vulnerabilities/2302

Third Party AdvisoryVDB Entry

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ233335

http://www.securityfocus.com/bid/477

Third Party AdvisoryVDB Entry

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-022

KEV Catalog EPSS Scores Vendors All CVEs