CVE-1999-1578: Buffer Overflow
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Registration Wizard ActiveX control (regwizc.dll)from your environment.Unregister and remove regwizc.dll (Registration Wizard ActiveX control) from affected systems or prevent it from being installed/loaded to eliminate the vulnerable component.
- Configuration
Disable ActiveX controls or configure Internet Explorer security zones to prompt or block unsigned/unsafe ActiveX controls (so regwizc.dll cannot be automatically invoked). Apply via browser settings or Group Policy where available.
Internet Explorer ActiveX controls = disabled or prompt - Compensating control
Until the vulnerable component is removed, restrict exposure of affected Internet Explorer hosts: block or filter web content that may host/invoke the control and isolate or restrict network access to systems that must remain running the affected IE versions to reduce the risk of remote exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1578?
CVE-1999-1578 has a critical severity due to the potential for executing arbitrary commands remotely.
How do I fix CVE-1999-1578?
To fix CVE-1999-1578, ensure that you update Internet Explorer to a version that is not affected by this vulnerability.
What software versions are affected by CVE-1999-1578?
CVE-1999-1578 affects Internet Explorer versions 4.0.1 and 5.0.
Can CVE-1999-1578 be exploited remotely?
Yes, CVE-1999-1578 can be exploited remotely, allowing attackers to execute commands on the affected system.
What is the nature of the vulnerability in CVE-1999-1578?
The vulnerability in CVE-1999-1578 is a buffer overflow in the Registration Wizard ActiveX control.