CVE Catalog
CVE-1999-1128
MediumExploitation Probability (EPSS)
High risk3.62%
88th percentile - higher than 88% of all known CVEs
Summary
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.
Risk Assessment
This vulnerability poses a serious security risk by allowing attackers to remotely take control of the user's system.
Recommendation
It is recommended to upgrade the Internet Explorer browser to a newer version or use an alternative browser to minimize risk.
Original NVD description (English source)
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.