## Description

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - ie

Affected Versions:

- 4.0

### microsoft - ie

Affected Versions:

- 4.0

### microsoft - ie

Affected Versions:

- 4.0.1

### microsoft - ie

Affected Versions:

- 4.0.1

### microsoft - ie

Affected Versions:

- 4.0.1

### microsoft - ie

Affected Versions:

- 4.1

### microsoft - ie

Affected Versions:

- 4.1

### microsoft - ie

Affected Versions:

- 4.1

### microsoft - ie

Affected Versions:

- 5

### microsoft - ie

Affected Versions:

- 5.0

### microsoft - ie

Affected Versions:

- 5.0

### microsoft - ie

Affected Versions:

- 5.0

### microsoft - internet_explorer

Affected Versions:

- 4.0

### microsoft - outlook

Affected Versions:

- 98

### microsoft - outlook

Affected Versions:

- 2000

### microsoft - outlook_express

Affected Versions:

- 4.27.3110.1

### microsoft - outlook_express

Affected Versions:

- 4.72.2106.4

### microsoft - outlook_express

Affected Versions:

- 4.72.3120.0

### microsoft - outlook_express

Affected Versions:

- 4.72.3612.1700

### microsoft - outlook_express

Affected Versions:

- 5.0

## References

- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-048

Neural Processor Active