CVE Catalog
CVE-1999-0874
HighExploitation Probability (EPSS)
Very high risk74.65%
99th percentile - higher than 99% of all known CVEs
Summary
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Risk Assessment
Attackers can exploit this vulnerability to disrupt server operations, leading to service unavailability for users.
Recommendation
It is recommended to upgrade to a newer version of IIS or apply relevant security patches to mitigate the risk.
Original NVD description (English source)
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.