CVE-1999-0975
MediumExploitation Probability (EPSS)
High risk84th percentile - higher than 84% of all known CVEs
Summary
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the system or execute malicious code in the context of another user, potentially leading to serious security breaches.
Recommendation
It is recommended to restrict access to the help system and to monitor and control .CNT and .hlp files to prevent unauthorized modifications.
Original NVD description (English source)
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.