CVE Catalog

CVE-1999-1484

High
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
26.98%

98th percentile - higher than 98% of all known CVEs

Summary

Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise.

Recommendation

It is recommended to update the ActiveX control to the latest version and restrict access to applications using this control.

Original NVD description (English source)

Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS