CVE-1999-0975: Medium severity Microsoft Windows NT vulnerability
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0975?
CVE-1999-0975 is considered to be a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-1999-0975?
To mitigate CVE-1999-0975, ensure that the Windows help system is not used or restrict access to the vulnerable .hlp and .cnt files.
What systems are affected by CVE-1999-0975?
CVE-1999-0975 affects Microsoft Windows NT 4.0, Windows 95, and Windows 98.
Can CVE-1999-0975 be exploited remotely?
CVE-1999-0975 requires local access to exploit, making it a local vulnerability.
What types of attacks can CVE-1999-0975 enable?
CVE-1999-0975 can enable attackers to execute arbitrary commands as another user on the affected system.