CVE-1999-0670: Buffer Overflow
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Eyedog ActiveX controlfrom your environment.Uninstall or remove the Eyedog ActiveX control from affected systems if it is not required.
- Configuration
Disable the Eyedog ActiveX control in Internet Explorer (for example via Internet Options -> Security/Custom level or Manage Add-ons) or set ActiveX controls to prompt/disable to prevent automatic instantiation.
Internet Explorer / ActiveX Eyedog ActiveX control enabled = disabled - Compensating control
Block download or execution of the Eyedog ActiveX control at the network boundary (web proxy, firewall, or application control) and restrict access to sites known to host the control.
- Operational
If exploitation is suspected, perform incident response actions (system imaging, malware scans, log review) and rotate any credentials that may have been exposed or could have been impacted by remote command execution.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0670?
CVE-1999-0670 has a high severity level due to the potential for remote code execution.
How do I fix CVE-1999-0670?
To fix CVE-1999-0670, ensure that you have applied the latest security updates from Microsoft for Internet Explorer versions 4.0 and 5.0.
What systems are affected by CVE-1999-0670?
CVE-1999-0670 affects Microsoft Internet Explorer versions 4.0 and 5.0.
What type of vulnerability is CVE-1999-0670?
CVE-1999-0670 is identified as a buffer overflow vulnerability.
Can CVE-1999-0670 be exploited remotely?
Yes, CVE-1999-0670 can be exploited remotely by an attacker.