Unscored severity · published May 4, 1997
CVE-1999-1380
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NU
Norton Utilities · Symantec
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1380
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1380
Patch
http://mlarchive.ima.com/win95/1997/May/0342.html
news.zdnet.co.uk
http://news.zdnet.co.uk/story/0%2C%2Cs2065518%2C00.html
www.iss.net
http://www.iss.net/security_center/static/7188.php
www.net-security.sk
http://www.net-security.sk/bugs/NT/nu20.html
More from Norton Utilities
6.0
CVE-2018-5235
Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for…
–
CVE-2006-1836
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to…