{"id":"CVE-1999-1380","url":"https://www.cyber-defence.io/tools/cve/CVE-1999-1380","generatedAt":"2026-10-27T20:53:27.920Z","title":"Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as…","description":"Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.","published":"1997-05-04T04:00:00.000Z","lastModified":"2026-06-16T21:50:19.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":5.1,"severity":"MEDIUM","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P"},"cwe":[],"affected":["symantec/norton utilities"],"epss":{"score":0.01815,"percentile":0.78523,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.81%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://mlarchive.ima.com/win95/1997/May/0342.html","tags":["Patch","Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/7188.php","source":"cve@mitre.org"},{"url":"http://www.net-security.sk/bugs/NT/nu20.html","source":"cve@mitre.org"},{"url":"http://mlarchive.ima.com/win95/1997/May/0342.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/7188.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.net-security.sk/bugs/NT/nu20.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-1999-1380","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}