CVE Catalog
CVE-1999-1093
MediumExploitation Probability (EPSS)
Very high risk12.55%
96th percentile - higher than 96% of all known CVEs
Summary
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially leading to full control over the user's system.
Recommendation
It is recommended to upgrade to a newer version of Internet Explorer or use alternative browsers to mitigate the risk.
Original NVD description (English source)
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.