$ cve CVE-1999-1575 JSON

CVE-1999-1575 EXPLOIT

5.1

MEDIUM · CVSS 2.0 · EPSS 35.6% (pctl 98)

Patch early

A public exploit exists.

Description

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.

Scoring

CVSS	5.1 (MEDIUM, v2.0)
Vector	AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS	35.63% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	1999-09-10
Last modified	2026-06-16

Affected (1)

Vendor	Product
microsoft	internet explorer

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer 4 (Windows 95/NT 4.0) - Setupctl ActiveX Control Buffer Overflow	1999-09-27
exploit-db	Microsoft Internet Explorer 5.0/4.0.1 - hhopen OLE Control Buffer Overflow	1999-09-27
exploit-db	Microsoft Internet Explorer 4.1/5 - Registration Wizard Buffer Overflow	1999-09-27

References

→ the Explorer · watch your stack · NVD