CVE-1999-1575
First published: Fri Sep 10 1999(Updated: )
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =4.0.1 | |
| Internet Explorer | =5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/archive/1/28719
- http://www.kb.cert.org/vuls/id/23412
- http://www.kb.cert.org/vuls/id/24839
- http://www.kb.cert.org/vuls/id/26924
- http://www.kb.cert.org/vuls/id/41408
- http://www.kb.cert.org/vuls/id/9162
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7097
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037
Frequently Asked Questions
What is the severity of CVE-1999-1575?
CVE-1999-1575 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-1999-1575?
To fix CVE-1999-1575, ensure you are using the latest version of the affected ActiveX controls and apply any relevant patches.
Which software is affected by CVE-1999-1575?
CVE-1999-1575 affects Microsoft Internet Explorer versions 4.0.1 and 5.0, among other Kodak/Wang ActiveX controls.
What types of vulnerabilities are associated with CVE-1999-1575?
CVE-1999-1575 is associated with vulnerabilities that can lead to remote code execution through compromised ActiveX controls.
Is CVE-1999-1575 still a concern today?
While CVE-1999-1575 is an older vulnerability, systems still running affected versions may remain at risk if not updated.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/description
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-index
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/4.0.1
- version/internet explorer/5.0