CVE-1999-0989: Buffer Overflow
Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the vnd.ms.radio protocol.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
microsoft/msdxm.ocxfrom your environment.Unregister or remove the MSDXM.OCX DirectShow filter (MSDXM.OCX) from affected systems to prevent exploitation via the vnd.ms.radio protocol.
- Configuration
Disable the vnd.ms.radio protocol handler in Internet Explorer (for example by unregistering the protocol or blocking its registration) so the vulnerable DirectShow filter cannot be invoked.
Internet Explorer vnd.ms.radio protocol handler = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0989?
CVE-1999-0989 is considered a high-severity vulnerability due to its ability to allow remote code execution.
How do I fix CVE-1999-0989?
To fix CVE-1999-0989, it is recommended to upgrade to a more recent and secure version of Microsoft Internet Explorer.
What versions of Internet Explorer are affected by CVE-1999-0989?
CVE-1999-0989 affects Internet Explorer 5.0 running on Windows 95, Windows 98, and Windows NT 4.0.
What type of attack does CVE-1999-0989 facilitate?
CVE-1999-0989 facilitates a buffer overflow attack, allowing attackers to execute arbitrary commands remotely.
Is CVE-1999-0989 still a threat today?
While CVE-1999-0989 is an old vulnerability, systems using unpatched versions of Internet Explorer 5.0 may still be at risk.