Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2002-2100
microsoft outlook
2002
attachment download
bypass
html
email
iframe
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.9%
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
Affected configurations
Node
microsoftoutlookMatch2000
ORmicrosoftoutlookMatch2002
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:outlook | microsoft outlook | eq | 2000 |
| microsoft:outlook | microsoft outlook | eq | 2002 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.9%
Related for CVE-2002-2100