What’s Vulnerable › Vulnerabilities

CVE-1999-1128

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-09-12 · updated 2026-06-16

Description

Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.

Affected products

• Microsoft Internet Explorer 11: 3.0.1

References

• http://members.tripod.com/~unibyte/iebug3.htm
• http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html
• http://members.tripod.com/~unibyte/iebug3.htm
• http://oliver.efri.hr/~crv/security/bugs/NT/ie3.html

Get alerted when CVE-1999-1128 or the next vulnerability affects your stack