PT-1999-1797 · Microsoft · Internet Explorer

Publicado 1999-09-10 · Atualizado 2021-07-22 · CVE-1999-1575

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 4.01 through 5.0

Description: The issue allows remote attackers to create and modify files and execute arbitrary commands due to certain ActiveX controls being marked as "Safe for Scripting". The affected ActiveX controls include Image Edit, Image Annotation, Image Scan, Thumbnail Image, Image Admin, HHOpen, Registration Wizard, and IE Active Setup.

Recommendations: For Internet Explorer versions 4.01 through 5.0, consider disabling the affected ActiveX controls to minimize the risk of exploitation. Restrict access to the imgedit.ocx, imgscan.ocx, imgthumb.ocx, imgadmin.ocx, hhopen.ocx, and regwizc.dll modules to prevent remote attackers from creating and modifying files and executing arbitrary commands. Avoid using the setupctl.dll in the affected IE Active Setup until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-1999-1575

Produtos afetados

Internet Explorer

Referências · 12

• 🔥 https://exploit-db.com/exploits/19528 · Exploit
• 🔥 https://exploit-db.com/exploits/19515 · Exploit
• 🔥 http://securityfocus.com/archive/1/28719 · Exploit
• 🔥 https://exploit-db.com/exploits/19521 · Exploit
• http://kb.cert.org/vuls/id/26924 · Nota
• http://kb.cert.org/vuls/id/9162 · Nota
• http://kb.cert.org/vuls/id/23412 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1575 · Nota de Segurança
• http://kb.cert.org/vuls/id/41408 · Nota
• http://kb.cert.org/vuls/id/24839 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037 · Nota