CVE-1999-1575 - The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands

Back Back to CVE browser

MEDIUM

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands

Published Apr 21, 2005

5.1

MEDIUM

CVSS 2.0

EPSS 35.63%

Description

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://www.kb.cert.org/vuls/id/23412
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/24839
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/26924
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/41408
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/9162
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securityfocus.com/archive/1/28719
mailing-listx_refsource_BUGTRAQExploit
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1556
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7097
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.kb.cert.org/vuls/id/23412		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/24839		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/26924		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/41408		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/9162		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securityfocus.com/archive/1/28719		mailing-listx_refsource_BUGTRAQExploit
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1556		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7097		vdb-entryx_refsource_XF