Lucene search

[email protected]CVE-1999-1016

HistoryAug 27, 1999 - 4:00 a.m.

CVE-1999-1016

1999-08-2704:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

microsoft

html control

vulnerability

dos

large html form fields

cve-1999-1016

nvd

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.9%

JSON

Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.

CPENameOperatorVersion
microsoft:outlook_expressmicrosoft outlook expresseq5.0
microsoft:frontpagemicrosoft frontpageeq*
qualcomm:eudoraqualcomm eudoraeq*
microsoft:internet_explorermicrosoft internet explorereq5.0

CPE	Name	Operator	Version
microsoft:outlook_express	microsoft outlook express	eq	5.0
microsoft:frontpage	microsoft frontpage	eq	*
qualcomm:eudora	qualcomm eudora	eq	*
microsoft:internet_explorer	microsoft internet explorer	eq	5.0

References

marc.info/?l=ntbugtraq&m=93578772920970&w=2

www.securityfocus.com/bid/606

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.9%

JSON

Related for CVE-1999-1016

openvas2