CVE-1999-1380
MediumExploitation Probability (EPSS)
High risk76th percentile - higher than 76% of all known CVEs
Summary
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, allowing remote attackers to execute arbitrary commands via the run option through malicious web pages.
Risk Assessment
Attackers can exploit this vulnerability to execute commands remotely, posing a significant threat to system and user data security.
Recommendation
It is recommended to update the software to the latest version and block the use of the TUNEOCX.OCX control in web browsers.
Original NVD description (English source)
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.