CVE-1999-1431

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.

CVSS v2.0

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

9.65% chance of exploitation in the next 30 days, 95th percentile

Published

2001-09-12

Updated

2024-08-01

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19144

References

• CVE Record
• NVD entry

Related

• CVE-1999-1423
• CVE-1999-1432
• CVE-1999-1414
• CVE-1999-1433
• CVE-1999-1413
• CVE-1999-1434