CVE-1999-1575: Medium severity Microsoft Internet Explorer vulnerability
The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Kodak/Wang ActiveX controls (imgedit.ocx, imgscan.ocx, imgthumb.ocx, imgadmin.ocx, hhopen.ocx, regwizc.dll, setupctl.dll)from your environment.Uninstall or unregister the listed Kodak/Wang ActiveX controls from affected systems if they are not required. The affected files are: imgedit.ocx (Image Edit / Image Annotation), imgscan.ocx (Image Scan), imgthumb.ocx (Thumbnail Image), imgadmin.ocx (Image Admin), hhopen.ocx (HHOpen), regwizc.dll (Registration Wizard), and setupctl.dll (IE Active Setup).
- Configuration
Remove the 'Safe for Scripting' marking (clear the scripting-safe attribute) for the listed Kodak/Wang ActiveX controls so they are not allowed to be scripted by web pages in IE.
Kodak/Wang ActiveX controls for Internet Explorer Safe for Scripting flag = disabled - Compensating control
Configure Internet Explorer security (or apply Group Policy) to disable or prompt before running ActiveX controls and scripting in Internet and untrusted zones; block or restrict the listed ActiveX controls from executing in the browser until they are removed or fixed.
- Operational
Search affected systems for signs of exploitation (unauthorized file creation/modification or unexpected command execution), remove any malicious artifacts found, and remediate impacted hosts (clean/reimage as required). Rotate any credentials or secrets potentially exposed as a result of compromise.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1575?
CVE-1999-1575 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-1999-1575?
To fix CVE-1999-1575, ensure you are using the latest version of the affected ActiveX controls and apply any relevant patches.
Which software is affected by CVE-1999-1575?
CVE-1999-1575 affects Microsoft Internet Explorer versions 4.0.1 and 5.0, among other Kodak/Wang ActiveX controls.
What types of vulnerabilities are associated with CVE-1999-1575?
CVE-1999-1575 is associated with vulnerabilities that can lead to remote code execution through compromised ActiveX controls.
Is CVE-1999-1575 still a concern today?
While CVE-1999-1575 is an older vulnerability, systems still running affected versions may remain at risk if not updated.