What’s Vulnerable › Vulnerabilities

CVE-1999-1431

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2001-09-12 · updated 2026-06-16

Description

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.

Affected products

• Microsoft Zero Administration Kit: 1.0

References

• http://marc.info/?l=ntbugtraq&m=91576100022688&w=2
• http://marc.info/?l=ntbugtraq&m=91606260910008&w=2
• http://www.securityfocus.com/bid/181
• http://marc.info/?l=ntbugtraq&m=91576100022688&w=2
• http://marc.info/?l=ntbugtraq&m=91606260910008&w=2
• http://www.securityfocus.com/bid/181

Get alerted when CVE-1999-1431 or the next vulnerability affects your stack