CVE Catalog
CVE-1999-0668
MediumExploitation Probability (EPSS)
Very high risk22.55%
97th percentile - higher than 97% of all known CVEs
Summary
The scriptlet.typelib ActiveX control is marked as 'safe for scripting' for Internet Explorer, allowing a remote attacker to execute arbitrary commands, as demonstrated by the Bubbleboy attack.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows remote code execution, potentially leading to system compromise.
Recommendation
It is recommended to disable or restrict the use of the scriptlet.typelib ActiveX control and to update Internet Explorer to the latest version.
Original NVD description (English source)
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.