Vulnerability Description
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Internet Explorer | 4.0.1 |
References
- http://www.kb.cert.org/vuls/id/23412US Government Resource
- http://www.kb.cert.org/vuls/id/24839US Government Resource
- http://www.kb.cert.org/vuls/id/26924US Government Resource
- http://www.kb.cert.org/vuls/id/41408US Government Resource
- http://www.kb.cert.org/vuls/id/9162US Government Resource
- http://www.securityfocus.com/archive/1/28719Exploit
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-03
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7097
- http://www.kb.cert.org/vuls/id/23412US Government Resource
- http://www.kb.cert.org/vuls/id/24839US Government Resource
- http://www.kb.cert.org/vuls/id/26924US Government Resource
- http://www.kb.cert.org/vuls/id/41408US Government Resource
- http://www.kb.cert.org/vuls/id/9162US Government Resource
- http://www.securityfocus.com/archive/1/28719Exploit
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-03
FAQ
What is CVE-1999-1575?
CVE-1999-1575 is a vulnerability with a CVSS score of 5.1 (MEDIUM). The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.oc...
How severe is CVE-1999-1575?
CVE-1999-1575 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-1999-1575?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Internet Explorer.