VULNERABILITY INTELLIGENCE

CVE-1999-1094

CVSS score7.5 HIGH

EPSS probability18.41%

CISA KEVNot currently listed

Published1999-12-31

Last modified2026-06-16

Description

Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."