CVE-1999-0668
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer,...
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
Exploit likelihood
What each source reports
NVD Score used
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
- Record
CVE-1999-0668- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
- Record
CVE-1999-0668- Updated
- 2026-11-02
EUVDEUVD-1999-0650 No score
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
- Record
EUVD-1999-0650- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mf4v-53v8-r6cm No score
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer,...
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.
- Record
GHSA-mf4v-53v8-r6cm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5 - ActiveX Object For Constructing Type Libraries For Scriptlets File Write | 1999-08-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-0668 is a medium vulnerability (CVSS 5.1) in Microsoft Internet Explorer, published August 21, 1999. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.6%, the 97th percentile. No source names a fixed version.
References
ciac.llnl.gov/ciac/bulletins/j-064.shtml
docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-032
support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240308
securityfocus.com/bid/598
nvd.nist.gov/vuln/detail/CVE-1999-0668
github.com/advisories/GHSA-mf4v-53v8-r6cm