CVE-1999-1370: High severity Microsoft Internet Explorer vulnerability
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Re-enable the screen saver after installation. Restore the system's screen saver settings that ie5setup.exe disables to reduce the risk of unauthorized physical access following an unattended installation.
Internet Explorer 5.0 setup (ie5setup.exe) - screen saver screen_saver_enabled = true - Configuration
Re-enable and start the Task Scheduler Service that ie5setup.exe disables so scheduled security‑critical programs can run as intended.
Task Scheduler Service (Windows) service_enabled_and_running = true - Operational
After re-enabling the Task Scheduler Service, verify scheduled security‑critical tasks execute correctly; re-run or reschedule any missed or failed tasks that occurred while the service was disabled.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1370?
CVE-1999-1370 is considered a low severity vulnerability as it primarily affects physical access to the system.
How do I fix CVE-1999-1370?
To mitigate CVE-1999-1370, ensure that the screen saver is enabled and properly configured after installation.
What are the risks associated with CVE-1999-1370?
The primary risk of CVE-1999-1370 is unauthorized access to the system by users with physical access during unattended installations.
Is CVE-1999-1370 still relevant today?
CVE-1999-1370 is mostly obsolete due to the phasing out of Internet Explorer 5.0, but awareness of its implications can still be useful.
Who is affected by CVE-1999-1370?
CVE-1999-1370 affects users and administrators of Internet Explorer 5.0 who perform unattended installations.