First published: Fri Aug 27 1999(Updated: )
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office FrontPage | ||
Internet Explorer | =5.0 | |
Microsoft Outlook Express | =5.0 | |
Eudora |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1016 is classified as a denial of service vulnerability due to its potential to cause 100% CPU consumption.
To mitigate CVE-1999-1016, it is recommended to update to the latest versions of affected software, which are no longer supported, or consider alternative software solutions.
CVE-1999-1016 affects Microsoft Internet Explorer 5.0, FrontPage Express, Outlook Express 5, and Qualcomm Eudora.
The implications of CVE-1999-1016 include potential disruption of service and system performance degradation due to excessive CPU usage.
Yes, CVE-1999-1016 can be exploited through malicious HTML emails that utilize large HTML form fields.