CVE-1999-1317

Medium

Published: 31/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 26/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.82%

76th percentile - higher than 76% of all known CVEs

Summary

A vulnerability in Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.

Risk Assessment

The risk is that a local user can gain unauthorized privileges, potentially leading to privilege escalation and system compromise.

Recommendation

It is recommended to upgrade Windows NT 4.0 to SP5 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.