Vulnerability Details : CVE-1999-1016
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-1999-1016
Probability of exploitation activity in the next 30 days: 0.18%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 55 % EPSS Score History EPSS FAQ
CVSS scores for CVE-1999-1016
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-1999-1016
-
http://marc.info/?l=ntbugtraq&m=93578772920970&w=2
-
http://www.securityfocus.com/bid/606
Exploit;Vendor Advisory
Products affected by CVE-1999-1016
- cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:frontpage:*:*:express:*:*:*:*:*
- cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:qualcomm:eudora:*:*:*:*:*:*:*:*