CVE-1999-1206

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, installs two ActiveX controls that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via a malicious web page that references (1) the Launch control, or (2) the RegObj control.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-12225.0Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address CVE-1999-12235.0IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (for CVE-1999-12262.6Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a l CVE-1999-12277.2Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.CVE-1999-12315.0ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts a CVE-1999-12337.5IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS CVE-1999-12345.0LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDom CVE-1999-12354.6Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the in CVE-1999-12364.6Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges CVE-1999-123710.0Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows rem CVE-1999-124110.0Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that CVE-1999-12447.2IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.