CVE-1999-1380

Medium CVSS 5.1

Published 1997-05-04 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-1999-1380, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to execute arbitrary commands via the run option through malicious web pages that are accessed by browsers such as Internet Explorer 3.0.

Sources

NVD record for CVE-1999-1380

CVSS vector: AV:N/AC:H/Au:N/C:P/I:P/A:P