CVE-1999-0975

Published Jan 4, 2000 CVSS 2.0 · 4.6 Medium EPSS 2.7% KEV · Not listed
Description
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-1999-0956 The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 1, 2024, 4:55 PM
Reserved
Dec 14, 1999, 12:00 AM
Status
Modified
Published
Dec 10, 1999, 5:00 AM
Modified
Jun 16, 2026, 9:49 PM