CVE-1999-0668

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 22.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-06-02 · updated 2026-06-16

Description

The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

Affected products

Microsoft Internet Explorer 11: 4.0, 5.0

References

http://ciac.llnl.gov/ciac/bulletins/j-064.shtml
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308
http://www.securityfocus.com/bid/598
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032
http://ciac.llnl.gov/ciac/bulletins/j-064.shtml
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308
http://www.securityfocus.com/bid/598
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032

Get alerted when CVE-1999-0668 or the next vulnerability affects your stack