CVE-1999-0669: Medium severity Microsoft Internet Explorer vulnerability
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Eyedog ActiveX controlfrom your environment.Uninstall or unregister the Eyedog ActiveX control from affected systems (remove the OCX/CLSID and associated files) to eliminate the vulnerable component.
- Configuration
Disable scripting of ActiveX controls marked as safe for scripting in Internet Explorer (via Internet Options or Group Policy) to prevent the Eyedog ActiveX control from being executed.
Internet Explorer Script ActiveX controls marked as safe for scripting = Disabled - Compensating control
Prevent the Eyedog ActiveX control from being delivered or executed by applying web filtering/URL blocking, restricting sites/zones that are allowed to run ActiveX, or enforcing Group Policy to block the specific control.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0669?
CVE-1999-0669 is considered a critical vulnerability due to its ability to allow remote command execution.
How do I fix CVE-1999-0669?
To fix CVE-1999-0669, upgrade to a newer version of Internet Explorer that does not have the vulnerability.
What software versions are affected by CVE-1999-0669?
CVE-1999-0669 affects Internet Explorer versions 4.0 and 5.0.
What type of attacks can be executed using CVE-1999-0669?
CVE-1999-0669 allows attackers to execute arbitrary commands on the victim's system.
Who is at risk from CVE-1999-0669?
Users of Internet Explorer 4.0 and 5.0 are at risk from CVE-1999-0669 if they use systems with this vulnerable ActiveX control.