CVE-1999-0749

🗓️ 04 Jan 2000 05:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 76 Views🌐 WEB

Buffer overflow in Windows 95 and 98's MS Telnet client via malformed Telnet argument

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-1999-0749	4 Jan 200005:00	–	cvelist
Exploit DB	Microsoft Windows 95/98 Internet Explorer 5/Telnet - Local Heap Overflow	16 Aug 199900:00	–	exploitdb
NVD	CVE-1999-0749	16 Aug 199904:00	–	nvd
Rapid7 Vulnerability Database (full)	CVE-1999-0749: Undefined Security Weakness	4 Jan 200000:00	–	rapid7
RedhatCVE	CVE-1999-0749	21 May 202518:14	–	redhatcve

NVD

Node

OR

microsoft windows_95

microsoft windows_98gold

Source	Link
securityfocus	www.securityfocus.com/bid/586
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033

Parameter	Position	Path	Description	CWE
URL arguments	path	telnet:	Buffer overflow in Windows Telnet client triggered by passing additional URL parameters via the telnet: scheme (as used by IE) from a web page, enabling arbitrary code execution on the client.
URL arguments	path	rlogin:	Buffer overflow in Windows Telnet client triggered by passing URL parameters via the rlogin: scheme (as used by IE) from a web page, enabling arbitrary code execution on the client.
URL arguments	path	tn3270:	Buffer overflow in Windows Telnet client triggered by passing URL parameters via the tn3270: scheme (as used by IE) from a web page, enabling arbitrary code execution on the client.

16 Jun 2026 21:48Current

7.2High risk

Vulners AI Score7.2

CVSS 22.6

EPSS0.07962

cve-1999-0749 buffer overflow windows 95 windows 98 ms telnet nvd