CVE-1999-0669

Vulnerability

The Eyedog ActiveX control, when used with Internet Explorer, is marked as 'safe for scripting' despite containing a buffer overflow vulnerability. This control allows registry access and information gathering. The vulnerability lies within the MSInfoLoadFile method and affects Microsoft Internet Explorer 4.0 and 5.0 on Windows 95, NT 4, 98, and 2000 [1].

Exploitation

An attacker can exploit this vulnerability by tricking a user into visiting a malicious webpage or opening a malicious email containing the Eyedog ActiveX control. The exploit involves calling the MSInfoLoadFile method with a specially crafted string that triggers the buffer overflow. The provided exploit example demonstrates overwriting the return address to point to ExitProcess, causing the host application to terminate [1].

Impact

Successful exploitation allows a remote attacker to execute arbitrary commands with the privileges of the user running Internet Explorer. The provided exploit targets the ExitProcess function, which would terminate the host process, demonstrating code execution capabilities [1].

Mitigation

No specific patch or fixed version information is available in the provided references. Users are advised to disable ActiveX controls in Internet Explorer or avoid visiting untrusted websites. The Eyedog ActiveX control is known to be vulnerable and should be considered unsafe for use [1].