PT-1999-1800 · Microsoft · Internet Explorer

Published 1999-09-24 · Updated 2021-07-22 · CVE-1999-1578

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 4.01 through 5

Description: A buffer overflow issue exists in the Registration Wizard ActiveX control, specifically in the regwizc.dll file, which is invoked by the InvokeRegWizard function. This allows remote attackers to execute arbitrary commands.

Recommendations: For Internet Explorer versions 4.01 through 5, consider disabling the InvokeRegWizard function in the regwizc.dll file as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-1999-1578

Affected Products

Internet Explorer

References · 6

• 🔥 https://exploit-db.com/exploits/19528 · Exploit
• 🔥 http://kb.cert.org/vuls/id/37556 · Exploit
• 🔥 http://securityfocus.com/bid/671 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1578 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3311 · Note
• http://securityfocus.com/archive/1/28719 · Note