PT-1997-1188 · Microsoft · Internet Explorer+1

Published 1997-03-01 · Updated 2021-07-22 · CVE-1999-1128

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer version 3.01 on Windows 95

Description The issue allows remote malicious web sites to execute arbitrary commands via a .isp file. This .isp file is automatically downloaded and executed without prompting the user.

Recommendations For Internet Explorer version 3.01 on Windows 95, consider disabling the automatic execution of .isp files as a temporary workaround until a patch is available. Restrict access to untrusted web sites to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1128

Affected Products

Internet Explorer

Windows 95

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1128 · Security Note
• http://members.tripod.com/~unibyte/iebug3.htm · Note
• http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html · Note