CVE-1999-1016
MediumExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
Microsoft HTML control used in Internet Explorer 5.0, FrontPage Express, Outlook Express 5, and Eudora allows remote malicious websites or HTML emails to cause a denial of service through large HTML form fields, leading to 100% CPU consumption.
Risk Assessment
Organizations may experience significant performance issues, potentially leading to service availability interruptions.
Recommendation
It is recommended to update the software to the latest versions and restrict the ability to open external HTML content in applications.
Original NVD description (English source)
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.