The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/868 |
Configurations
Configuration 1 (hide)
|
Information
Published : 1999-12-09 21:00
Updated : 2008-09-09 05:36
NVD link : CVE-1999-0975
Mitre link : CVE-1999-0975
JSON object : View
CWE
Products Affected
microsoft
- windows_nt
- windows_98
- windows_95