CVE-1999-1094

High

Published: 31/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

18.08%

97th percentile - higher than 97% of all known CVEs

Summary

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the 'mk:' protocol.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially taking control of the user's system.

Recommendation

It is recommended to update Internet Explorer to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."