CVE Catalog

CVE-1999-1241

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
14.42%

96th percentile - higher than 96% of all known CVEs

Summary

Internet Explorer with a security setting below Medium allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the user's system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to raise the security settings of Internet Explorer to at least Medium and to avoid visiting unknown or suspicious websites.

Original NVD description (English source)

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS