CVE-1999-1093 - Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page

Back Back to CVE browser

MEDIUM

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page

Published Mar 9, 2002

5.1

MEDIUM

CVSS 2.0

EPSS 12.79%

Description

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://support.microsoft.com/support/kb/articles/q191/2/00.asp
vendor-advisoryx_refsource_MSKB
http://www.iss.net/security_center/static/1276.php
vdb-entryx_refsource_XF
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011
vendor-advisoryx_refsource_MS

Link	Providers	Tags
http://support.microsoft.com/support/kb/articles/q191/2/00.asp		vendor-advisoryx_refsource_MSKB
http://www.iss.net/security_center/static/1276.php		vdb-entryx_refsource_XF
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011		vendor-advisoryx_refsource_MS

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1093

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1093

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-1093