CVE Catalog
CVE-1999-1577
MediumExploitation Probability (EPSS)
Very high risk19.49%
97th percentile - higher than 97% of all known CVEs
Summary
Buffer overflow in HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, posing a serious threat to system and user data security.
Recommendation
It is recommended to update or remove the HHOpen control and to limit the use of outdated versions of Internet Explorer.
Original NVD description (English source)
Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.