CVE Catalog

CVE-1999-0669

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
8.33%

94th percentile - higher than 94% of all known CVEs

Summary

The Eyedog ActiveX control is marked as 'safe for scripting' for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows remote code execution, potentially leading to system compromise.

Recommendation

It is recommended to disable or remove the Eyedog ActiveX control and to limit the use of ActiveX in Internet Explorer.

Original NVD description (English source)

The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS