CVE-1999-0989

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 6, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0989 is a buffer overflow vulnerability affecting Internet Explorer 5's DirectShow filter, specifically the MSDXM.OCX component. Malicious actors can exploit this issue by sending maliciously crafted data via the vnd.ms.radio protocol. Successful exploitation results in arbitrary code execution, potentially allowing the attacker to gain control of the affected system. This vulnerability poses a significant risk to users who have Internet Explorer 5 installed and are exposed to untrusted content, such as malicious websites or email attachments. It is highly recommended that users update their software to a version that is not affected by this issue or take other protective measures to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft