PT-1999-1532 · Microsoft+1 · Frontpage Express+3

Published 1999-08-27 · Updated 2021-07-22 · CVE-1999-1016

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft HTML control as used in Internet Explorer 5.0 Microsoft HTML control as used in FrontPage Express Microsoft HTML control as used in Outlook Express 5 Microsoft HTML control as used in Eudora

Description The issue allows remote malicious web sites or HTML emails to cause a denial of service, resulting in 100% CPU consumption. This can be achieved via large HTML form fields, such as text inputs in a table cell.

Recommendations For Internet Explorer 5.0, consider restricting the use of large HTML form fields until a fix is available. For FrontPage Express, avoid using large HTML form fields in table cells to minimize the risk of exploitation. For Outlook Express 5, restrict access to HTML emails with large form fields to prevent denial of service attacks. For Eudora, as a temporary workaround, consider disabling the rendering of large HTML form fields in emails until a patch is available.

Exploit

Fix

Related Identifiers

CVE-1999-1016

Affected Products

Eudora

Frontpage Express

Internet Explorer 5.0

Outlook Express 5

References · 4

• 🔥 http://securityfocus.com/bid/606 · Exploit
• 🔥 https://exploit-db.com/exploits/19471 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1016 · Security Note
• http://marc.info/?l=ntbugtraq&m=93578772920970&w=2 · Note