PT-1999-1611 · Hewlett Packard+2 · Hp Pavilion Pc+2

Published 1999-12-31 · Updated 2016-10-18 · CVE-1999-1206

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SystemSoft SystemWizard package in HP Pavilion PC with Windows 98

Description The issue allows remote attackers to execute arbitrary commands via a malicious web page that references either the Launch control or the RegObj control. This is possible because the SystemSoft SystemWizard package installs two ActiveX controls that are marked as safe for scripting.

Recommendations For SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, consider disabling the Launch and RegObj ActiveX controls as a temporary workaround until a patch is available. Restrict access to these controls to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1206

Affected Products

Hp Pavilion Pc

Systemsoft Systemwizard

Windows 98

References · 4

• http://systemsoft.com/l-2/l-3/support-systemwizard.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1206 · Security Note
• http://marc.info/?l=bugtraq&m=93336970231857&w=2 · Note
• http://securityfocus.com/bid/555 · Note