Vulnerabilities > CVE-1999-1575 - Unspecified vulnerability in Microsoft Internet Explorer 4.0.1/5.0

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
microsoft
exploit available
NVD
Published: 1999-09-10
Updated: 2021-07-22

Summary

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

Exploit-Db

  • descriptionMicrosoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow. CVE-1999-1575. Remote exploit for windows platform
    idEDB-ID:19515
    last seen2016-02-02
    modified1999-09-27
    published1999-09-27
    reporterShane Hird
    sourcehttps://www.exploit-db.com/download/19515/
    titleMicrosoft Internet Explorer 4.0 for Windows 95/Windows NT 4 - Setupctl ActiveX Control Buffer Overflow
  • descriptionMicrosoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4/Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0 hhopen OLE Control ...
    idEDB-ID:19521
    last seen2016-02-02
    modified1999-09-27
    published1999-09-27
    reporterShane Hird
    sourcehttps://www.exploit-db.com/download/19521/
    titleMicrosoft Internet Explorer 5.0/4.0.1 hhopen OLE Control Buffer Overflow Vulnerability
  • descriptionMicrosoft Internet Explorer 4.1/5.0 for Windows 95/Windows NT 4,Windows 98 Registration Wizard Buffer Overflow Vulnerability. CVE-1999-1575,CVE-1999-1578. Lo...
    idEDB-ID:19528
    last seen2016-02-02
    modified1999-09-27
    published1999-09-27
    reporterShane Hird
    sourcehttps://www.exploit-db.com/download/19528/
    titleMicrosoft Internet Explorer 4.1/5.0 Registration Wizard Buffer Overflow

References