CVE-1999-1431

CVE-1999-1431 describes a local bypass in ZAK Appstation: an attacker can launch Explorer from Office 97 applications (e.g., Word), install software into the TEMP directory, and rename it to an allowed executable such as Winword.exe to bypass the Run only allowed apps policy. CVSS v2 is base 4.6 ...