ID CVE-1999-1016
Summary Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:qualcomm:eudora:*:*:*:*:*:*:*:*
    cpe:2.3:a:qualcomm:eudora:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:frontpage:*:*:express:*:*:*:*:*
    cpe:2.3:a:microsoft:frontpage:*:*:express:*:*:*:*:*
  • cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 22-07-2021 - 14:02)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 606
ntbugtraq 19990827 HTML code to crash IE5 and Outlook Express 5
Last major update 22-07-2021 - 14:02
Published 27-08-1999 - 04:00
Last modified 22-07-2021 - 14:02
Back to Top