PT-1997-1230 · Microsoft+1 · Internet Explorer+3

Published 1997-05-04 · Updated 2008-09-05 · CVE-1999-1380

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Norton Utilities version 2.0 for Windows 95

Description The issue allows remote attackers to execute arbitrary commands via malicious web pages accessed by browsers such as Internet Explorer 3.0, because the TUNEOCX.OCX ActiveX control is marked as safe for scripting.

Recommendations For Symantec Norton Utilities version 2.0 for Windows 95, consider disabling the TUNEOCX.OCX ActiveX control as a temporary workaround until a patch is available. Restrict access to malicious web pages to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1380

Affected Products

Internet Explorer

Symantec Norton Utilities

Tuneocx.Ocx Activex Control

Windows 95

References · 5

• http://mlarchive.ima.com/win95/1997/May/0342.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1380 · Security Note
• http://iss.net/security_center/static/7188.php · Note
• http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html · Note
• http://net-security.sk/bugs/NT/nu20.html · Note