CVE-1999-1093 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Internet Explorer
3 documents3 sources
Severity
5.1MEDIUMNVD
EPSS
6.3%
top 9.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 31
Latest updateApr 20
Description
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
CVSS vector
AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4