First published: Tue Mar 23 1999(Updated: )
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Service, which might prevent the scheduled execution of security-critical programs.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =5.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1370 is considered a low severity vulnerability as it primarily affects physical access to the system.
To mitigate CVE-1999-1370, ensure that the screen saver is enabled and properly configured after installation.
The primary risk of CVE-1999-1370 is unauthorized access to the system by users with physical access during unattended installations.
CVE-1999-1370 is mostly obsolete due to the phasing out of Internet Explorer 5.0, but awareness of its implications can still be useful.
CVE-1999-1370 affects users and administrators of Internet Explorer 5.0 who perform unattended installations.