CVE-1999-0749

Microsoft Windows 95 and 98 - Buffer Overflow in Telnet Client

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0749. PoCs published by Jeremy Kothe.

AI-analyzed exploit summary This exploit leverages a buffer overflow in Windows 95/98 telnet.exe via a malicious URL passed through IE4/IE5. The PoC generates a crafted HTML file that triggers arbitrary code execution when the victim closes the telnet window.

Description

Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Jeremy Kothe · clocalwindows

https://www.exploit-db.com/exploits/19462

View Code ZIP pw:eip

This exploit leverages a buffer overflow in Windows 95/98 telnet.exe via a malicious URL passed through IE4/IE5. The PoC generates a crafted HTML file that triggers arbitrary code execution when the victim closes the telnet window.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Windows 95/98 with IE4 or IE5 (5.00.2314.1003, 5.00.2314.1003IC)

No auth needed

Prerequisites: Victim must visit a malicious webpage or open a crafted HTML file · Target system must be running vulnerable Windows 95/98 with IE4/IE5

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-033

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/586

Scores

EPSS 0.0818

EPSS Percentile 94.2%

Details

Status published

Products (2)

microsoft/windows_95

microsoft/windows_98

Published Aug 16, 1999

Tracked Since Feb 18, 2026