Microsoft Internet Explorer 3.0/4.0/4.0.1/5.0 Registration Wizard ActiveX Control regwizc.dll memory corruption

Summaryinfo

A vulnerability was found in Microsoft Internet Explorer 3.0/4.0/4.0.1/5.0. It has been rated as critical. Affected by this vulnerability is an unknown functionality in the library regwizc.dll of the component Registration Wizard ActiveX Control. The manipulation leads to memory corruption. This vulnerability is documented as CVE-1999-1578. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Microsoft Internet Explorer 3.0/4.0/4.0.1/5.0 (Web Browser). This issue affects an unknown function in the library regwizc.dll of the component Registration Wizard ActiveX Control. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.

The issue has been introduced in 08/13/1996. The weakness was released 09/24/1999 as confirmed advisory (CERT.org). The advisory is shared at kb.cert.org. The identification of this vulnerability is CVE-1999-1578 since 04/21/2005. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details as well as a public exploit are known.

The exploit is available at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1137 days. During that time the estimated underground price was around $25k-$100k.

Upgrading to version 6.0 eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (3311), Exploit-DB (19528) and SecurityFocus (BID 671†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Web Browser

Vendor

• Microsoft

Name

• Internet Explorer

Version

• 3.0
• 4.0
• 4.0.1
• 5.0

License

• commercial

Support

• end of life

Website

• Vendor: https://www.microsoft.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion