CVE-1999-0967: Buffer Overflow
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
microsoft/outlook-expressfrom your environment.Uninstall Microsoft Outlook Express if it is not required in your environment to eliminate exposure to the vulnerable HTML library.
- Remove
Remove
microsoft/internet-explorerfrom your environment.Uninstall or disable Internet Explorer where possible and where doing so will not break required functionality, to remove the affected HTML rendering component.
- Configuration
If supported in your environment, disable handling of the res: (local resource) URI scheme in Internet Explorer to prevent use of the vulnerable HTML library via res: references.
Internet Explorer res: protocol handling = disabled - Configuration
If supported, disable handling of the res: (local resource) URI scheme within Outlook Express to prevent rendering of HTML that could trigger the buffer overflow.
Microsoft Outlook Express res: protocol handling = disabled - Configuration
If possible, disable handling of the res: (local resource) URI scheme in Windows (File) Explorer so local resource references cannot be used to exploit the HTML library.
Windows File Explorer res: protocol handling = disabled - Compensating control
Deploy network- and gateway-level filtering (web proxy, URL filter, email gateway, or WAF) to block or remove res: URI scheme references and to filter untrusted HTML content that could reference local resources.
- Operational
Monitor Microsoft security advisories and apply any official patches, hotfixes, or vendor guidance for the HTML library and handling of the res: protocol as soon as they are released.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0967?
CVE-1999-0967 is considered a high severity vulnerability due to the potential for remote code execution through a buffer overflow.
How do I fix CVE-1999-0967?
To fix CVE-1999-0967, you should apply the latest patches and updates available for Internet Explorer, Outlook Express, and Windows Explorer.
Which versions are affected by CVE-1999-0967?
CVE-1999-0967 affects Internet Explorer 4.0, and versions of Outlook Express and Windows Explorer that utilize the vulnerable HTML library.
What types of attacks can exploit CVE-1999-0967?
CVE-1999-0967 can be exploited through specially crafted HTML content that triggers a buffer overflow.
Is there a workaround for CVE-1999-0967?
Disabling the use of local resource protocols or avoiding untrusted HTML content can serve as a temporary workaround for CVE-1999-0967.