CVE-1999-1094 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Internet Explorer
3 documents3 sources
Severity
7.5HIGHNVD
EPSS
6.9%
top 8.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 31
Latest updateApr 20
Description
Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4