Microsoft: >> Internet Explorer >> 4.0 Security Vulnerabilities
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
CVSS Score
5.1
EPSS Score
0.077
Published
1999-11-11
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
CVSS Score
7.5
EPSS Score
0.051
Published
1999-11-01
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
CVSS Score
2.6
EPSS Score
0.047
Published
1999-11-01
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
CVSS Score
4.0
EPSS Score
0.091
Published
1999-09-01
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
CVSS Score
4.0
EPSS Score
0.085
Published
1999-09-01
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
CVSS Score
5.1
EPSS Score
0.226
Published
1999-08-21
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
CVSS Score
5.1
EPSS Score
0.062
Published
1999-05-27
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
CVSS Score
2.6
EPSS Score
0.133
Published
1999-05-01
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
CVSS Score
7.5
EPSS Score
0.116
Published
1999-04-21
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
CVSS Score
7.5
EPSS Score
0.099
Published
1999-04-21