CVE-1999-1531

IBM HomePagePrint 1.0.7 - Buffer Overflow via Long IMG_SRC HTML Tag

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1531. PoCs published by UNYUN.

AI-analyzed exploit summary This exploit targets a buffer overflow in IBM HomePagePrint 1.0.7 via a maliciously crafted IMG SRC tag. It generates an HTML file that, when previewed or printed, executes arbitrary code (e.g., launching notepad.exe) by overwriting the EIP and redirecting execution to shellcode.

Description

Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.

Exploits (1)

exploitdb WORKING POC VERIFIED

by UNYUN · cremotewindows

https://www.exploit-db.com/exploits/19588

View Code ZIP pw:eip

This exploit targets a buffer overflow in IBM HomePagePrint 1.0.7 via a maliciously crafted IMG SRC tag. It generates an HTML file that, when previewed or printed, executes arbitrary code (e.g., launching notepad.exe) by overwriting the EIP and redirecting execution to shellcode.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: IBM HomePagePrint 1.0.7

No auth needed

Prerequisites: Victim must use IBM HomePagePrint 1.0.7 to preview/print the malicious HTML

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=94157187815629&w=2

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/763

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/7767.php

Scores

EPSS 0.0487

EPSS Percentile 90.9%

Details

Status published

Products (1)

ibm/homepageprint 1.0.7

Published Nov 02, 1999

Tracked Since Feb 18, 2026