CVE-1999-1093: Microsoft Internet Explorer

Medium severity, CVSS 5.1. EPSS: 12.8% chance of exploitation in the next 30 days.

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.

Affected products

• Microsoft Internet Explorer: up to and including 4.0.1; version 4.0 only; version 4.0.1 only

Published 1999-12-31. Last modified 2026-06-16.