CVE-1999-1084

Registry Key - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1084. PoCs published by anonymous.

AI-analyzed exploit summary This writeup describes a privilege escalation vulnerability in Windows systems where the 'Common Startup' registry key is writable by any authenticated user, allowing arbitrary code execution at login. The example demonstrates adding a malicious batch file to the startup folder to create an admin account.

Description

The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specify a Trojan Horse debugger which is automatically executed on a system crash.

Exploits (1)

exploitdb WRITEUP VERIFIED
by anonymous · textlocalwindows
https://www.exploit-db.com/exploits/19798

This writeup describes a privilege escalation vulnerability in Windows systems where the 'Common Startup' registry key is writable by any authenticated user, allowing arbitrary code execution at login. The example demonstrates adding a malicious batch file to the startup folder to create an admin account.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Windows (versions affected by CVE-1999-1084)
Auth required
Prerequisites: Authenticated user access to the target system
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (5)

Core 5
Core References
Mailing List mailing-list x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=90222453431604&w=2
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1044
Patch, Vendor Advisory third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/k-029.shtml
Patch, Vendor Advisory vendor-advisory x_refsource_mskb
http://support.microsoft.com/support/kb/articles/q103/8/61.asp

Scores

EPSS 0.0351
EPSS Percentile 88.0%

Details

Status published
Products (1)
microsoft/windows_nt 4.0 (2 CPE variants)
Published Dec 31, 1999
Tracked Since Feb 18, 2026