What’s Vulnerable › Vulnerabilities

CVE-1999-1093

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-03-09 · updated 2026-06-16

Description

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.

Affected products

• Microsoft Internet Explorer 11: through 4.0.1; 4.0, 4.0.1

References

• http://support.microsoft.com/support/kb/articles/q191/2/00.asp
• http://www.iss.net/security_center/static/1276.php
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011
• http://support.microsoft.com/support/kb/articles/q191/2/00.asp
• http://www.iss.net/security_center/static/1276.php
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-011

Get alerted when CVE-1999-1093 or the next vulnerability affects your stack