Microsoft: >> Internet Explorer >> 4.0 Security Vulnerabilities
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
CVSS Score
5.1
EPSS Score
0.08
Published
1999-11-11
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message.
CVSS Score
7.5
EPSS Score
0.031
Published
1999-11-01
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
CVSS Score
2.6
EPSS Score
0.009
Published
1999-11-01
The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
CVSS Score
4.0
EPSS Score
0.126
Published
1999-09-01
Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.
CVSS Score
4.0
EPSS Score
0.103
Published
1999-09-01
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
CVSS Score
5.1
EPSS Score
0.192
Published
1999-08-21
The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.
CVSS Score
5.1
EPSS Score
0.066
Published
1999-05-27
The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.
CVSS Score
2.6
EPSS Score
0.211
Published
1999-05-01
Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.
CVSS Score
7.5
EPSS Score
0.034
Published
1999-04-21
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.
CVSS Score
7.5
EPSS Score
0.045
Published
1999-04-21