CVE-1999-1128: Microsoft Internet Explorer

Medium severity, CVSS 5.1. EPSS: 3.6% chance of exploitation in the next 30 days.

Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.

Affected products

• Microsoft Internet Explorer: version 3.0.1 only

Published 1997-03-01. Last modified 2026-06-16.