CVE-1999-1094

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 31, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-1094 is a buffer overflow vulnerability affecting Internet Explorer 4.01 and earlier versions. Malicious URLs with the "mk:" protocol can be used by remote attackers to execute arbitrary commands on victim's systems. The issue arises due to insufficient bounds checking on URL input, leading to buffer overflow and potential code execution. This vulnerability, known as the "MK Overrun security issue," posed a significant risk to users browsing the web during that time.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Internet Explorer

Affected Vendors

  • Microsoft