Published: 21/08/1999 Updated: 07/11/2023

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 515

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote malicious user to execute arbitrary commands as demonstrated by Bubbleboy.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet explorer 4.0
microsoft internet explorer 5.0

Microsoft Internet Explorer 50 for Windows 95/Windows 98/Windows NT 4 ActiveX "Object for constructing type libraries for scriptlets" Vulnerability source: wwwsecurityfocuscom/bid/598/info The 'scriptlettyplib' ActiveX control can create, edit, and overwrite files on the local disk This means that an executable text file (eg a 'hta ...

NVD-CWE-Other http://ciac.llnl.gov/ciac/bulletins/j-064.shtml http://www.securityfocus.com/bid/598 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032 http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308 https://nvd.nist.gov https://www.exploit-db.com/exploits/19468/https://www.kb.cert.org/vuls/id/1673

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-1999-0668

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect