CVE-1999-1016

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-09-12 · updated 2026-06-16

Description

Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumption) via large HTML form fields such as text inputs in a table cell.

Affected products

Microsoft Frontpage: all versions
Microsoft Internet Explorer 11: 5.0
Microsoft Outlook Express: 5.0
Qualcomm Eudora: all versions

References

http://marc.info/?l=ntbugtraq&m=93578772920970&w=2
http://www.securityfocus.com/bid/606
http://marc.info/?l=ntbugtraq&m=93578772920970&w=2
http://www.securityfocus.com/bid/606

Get alerted when CVE-1999-1016 or the next vulnerability affects your stack