Summaryinfo

A vulnerability classified as critical has been found in Microsoft Internet Explorer 4.01/5.0. Affected is an unknown function in the library imgedit.ocx/imgscan.ocx/imgthumb.ocx/imgadmin.ocx/hhopen.ocx/regwizc.dll/setupctl.dll of the component Kodak/Wang ActiveX Controls. The manipulation leads to privileges management. This vulnerability is traded as CVE-1999-1575. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability was found in Microsoft Internet Explorer 4.01/5.0 (Web Browser). It has been rated as critical. This issue affects an unknown code block in the library imgedit.ocx/imgscan.ocx/imgthumb.ocx/imgadmin.ocx/hhopen.ocx/regwizc.dll/setupctl.dll of the component Kodak/Wang ActiveX Controls. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.

The issue has been introduced in 11/18/1997. The weakness was released 09/10/1999 as MS99-037 as confirmed bulletin (Technet). It is possible to read the advisory at technet.microsoft.com. The identification of this vulnerability is CVE-1999-1575 since 04/21/2005. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

The exploit is available at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 661 days. During that time the estimated underground price was around $25k-$100k.

Applying the patch MS99-037 is able to eliminate this problem. The bugfix is ready for download at technet.microsoft.com.

The vulnerability is also documented in the databases at X-Force (7097) and Exploit-DB (19528). kb.cert.org is providing further details. Entry connected to this vulnerability is available at VDB-14829. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Web Browser

Vendor

• Microsoft

Name

• Internet Explorer

Version

• 4.01
• 5.0

License

• commercial

Support

• end of life

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion