CVE-1999-1206

CVE-1999-1206 describes a vulnerability in the SystemSoft SystemWizard package, primarily affecting HP Pavilion PCs running Windows 98, though other platforms may also be susceptible. The flaw stems from two ActiveX controls, "Launch" and "RegObj," being marked as safe for scripting. This allows remote attackers to execute arbitrary commands on a vulnerable system by enticing a user to visit a malicious web page that references these controls. The vulnerability is rated as High severity with a CVSS score of 7.5, indicating a critical risk. Its attack vector is network-based with low attack complexity and no authentication required, allowing for potential compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation for CVE-1999-1206. No exploit code is publicly available on platforms like Metasploit or ExploitDB, and there is no community discussion or media coverage surrounding this particular CVE.