CVE-1999-0668

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Aug 21, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-06694.0The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary comm CVE-1999-06704.0Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.CVE-1999-06715.1Buffer overflow in ToxSoft NextFTP client through CWD command.CVE-1999-06725.1Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.CVE-1999-06735.1Buffer overflow in ALMail32 POP3 client via From: or To: headers.CVE-1999-06747.2The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.CVE-1999-06755.0Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.CVE-1999-06764.6sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.CVE-1999-06777.5The WebRamp web administration utility has a default password.CVE-1999-06785.0A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files CVE-1999-06797.5Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.CVE-1999-06805.0Windows NT Terminal Server performs extra work when a client opens a new connection but before it is authenticated, allowing for a denial of