Lucene search
HistoryOct 19, 2007 - 10:00 a.m.
CVE-2003-1378
cve-2003-1378
microsoft outlook express
outlook 2000
security zone
remote attackers
arbitrary programs
html email
codebase parameter
vulnerability analysis
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:C/A:N
7.3 High
AI Score
Confidence
High
0.239 Low
EPSS
Percentile
96.6%
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Affected configurations
Node
microsoftoutlookMatch2000
ORmicrosoftoutlookMatch2000sp2
ORmicrosoftoutlookMatch2000sr1
ORmicrosoftoutlook_expressMatch6.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:outlook | microsoft outlook | eq | 2000 |
| microsoft:outlook_express | microsoft outlook express | eq | 6.0 |
Related
nvd
nvd
CVE-2003-1378
2003-12-31 05:00:00
CVE-2002-0077
2002-01-13 05:00:00
cvelist
cvelist
CVE-2003-1378
2007-10-19 10:00:00
CVE-2002-0077
2002-03-30 05:00:00
cert
cert
cve
cve
CVE-2002-0077
2002-03-30 05:00:00
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:C/A:N
7.3 High
AI Score
Confidence
High
0.239 Low
EPSS
Percentile
96.6%
Related for CVE-2003-1378