PT-1997-1230 · Microsoft+1 · Internet Explorer+3

Publicado 1997-05-04 · Atualizado 2008-09-05 · CVE-1999-1380

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Norton Utilities version 2.0 for Windows 95

Description The issue allows remote attackers to execute arbitrary commands via malicious web pages accessed by browsers such as Internet Explorer 3.0, because the TUNEOCX.OCX ActiveX control is marked as safe for scripting.

Recommendations For Symantec Norton Utilities version 2.0 for Windows 95, consider disabling the TUNEOCX.OCX ActiveX control as a temporary workaround until a patch is available. Restrict access to malicious web pages to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1380

Produtos afetados

Internet Explorer

Symantec Norton Utilities

Tuneocx.Ocx Activex Control

Windows 95

Referências · 5

• http://iss.net/security_center/static/7188.php · Nota
• http://mlarchive.ima.com/win95/1997/May/0342.html · Aviso do Fabricante
• http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html · Nota
• http://net-security.sk/bugs/NT/nu20.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1380 · Nota de Segurança