CVE-1999-1016
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large…
Does this matter?
Lower severity and a low EPSS score (7.70%). Track it; it rarely justifies an emergency change on its own.
Description
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 7.70% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/frontpage · microsoft/internet explorer · microsoft/outlook express · qualcomm/eudora
- Source
- cve@mitre.org
References
- http://marc.info/?l=ntbugtraq&m=93578772920970&w=2
- http://www.securityfocus.com/bid/606Exploit, Vendor Advisory
- http://marc.info/?l=ntbugtraq&m=93578772920970&w=2
- http://www.securityfocus.com/bid/606Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.