CVE-1999-0839: High severity Microsoft ie vulnerability
Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Windows NT Task Schedulerfrom your environment.If Task Scheduler (installed with Internet Explorer 5) is not required, uninstall or disable the Windows NT Task Scheduler component to eliminate the vulnerable component that allows privilege escalation via modifying scheduled jobs.
- Compensating control
Restrict permissions on scheduled tasks so that only authorized administrator accounts can create or modify jobs (apply least privilege to task folders/ACLs).
- Operational
Audit existing scheduled jobs for unauthorized or suspicious modifications and monitor creation/modification of scheduled tasks until a permanent fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0839?
CVE-1999-0839 is considered a high severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-1999-0839?
To fix CVE-1999-0839, you should upgrade to a later version of Internet Explorer that does not include this vulnerability.
What systems are affected by CVE-1999-0839?
CVE-1999-0839 affects Windows NT Task Scheduler installed with Internet Explorer 5 on Windows 95, Windows 98, and Windows NT 4.0.
Can CVE-1999-0839 be exploited remotely?
CVE-1999-0839 requires local access to exploit, as it involves modifying scheduled tasks that a user already has permission to access.
What are the consequences of exploiting CVE-1999-0839?
Exploiting CVE-1999-0839 could allow an attacker to gain elevated privileges on the affected system.