CVE-1999-1241: Critical severity Microsoft Internet Explorer vulnerability
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set the Internet Explorer security setting to Medium or higher (for the relevant zone(s)) to prevent the FileSystemObject ActiveX object from being usable by malicious web pages.
Internet Explorer security setting = Medium or higher
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1241?
CVE-1999-1241 is considered a high severity vulnerability due to its potential to allow remote code execution.
How can I mitigate CVE-1999-1241?
To mitigate CVE-1999-1241, set the security level of Internet Explorer to Medium or higher.
Which versions of Internet Explorer are affected by CVE-1999-1241?
CVE-1999-1241 specifically affects Internet Explorer version 6.0.2900.
What types of attacks are possible with CVE-1999-1241?
CVE-1999-1241 allows attackers to execute arbitrary commands on the victim's machine via a malicious web page.
Is the FileSystemObject ActiveX object related to CVE-1999-1241?
Yes, CVE-1999-1241 exploits the FileSystemObject ActiveX object to execute commands on a vulnerable system.