PT-1999-1611 · Hewlett Packard+2 · Hp Pavilion Pc+2

Publicado 1999-12-31 · Atualizado 2016-10-18 · CVE-1999-1206

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SystemSoft SystemWizard package in HP Pavilion PC with Windows 98

Description The issue allows remote attackers to execute arbitrary commands via a malicious web page that references either the Launch control or the RegObj control. This is possible because the SystemSoft SystemWizard package installs two ActiveX controls that are marked as safe for scripting.

Recommendations For SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, consider disabling the Launch and RegObj ActiveX controls as a temporary workaround until a patch is available. Restrict access to these controls to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1206

Produtos afetados

Hp Pavilion Pc

Systemsoft Systemwizard

Windows 98

Referências · 4

• http://systemsoft.com/l-2/l-3/support-systemwizard.htm · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=93336970231857&w=2 · Nota
• http://securityfocus.com/bid/555 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1206 · Nota de Segurança