Lucene search
HistoryDec 31, 2003 - 5:00 a.m.
CVE-2003-1378
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:C/A:N
7.2 High
AI Score
Confidence
Low
0.239 Low
EPSS
Percentile
96.6%
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Affected configurations
Node
microsoftoutlookMatch2000
ORmicrosoftoutlookMatch2000sp2
ORmicrosoftoutlookMatch2000sr1
ORmicrosoftoutlook_expressMatch6.0
Related
cve
cve
CVE-2003-1378
2007-10-19 10:00:00
CVE-2002-0077
2002-03-30 05:00:00
cvelist
cvelist
CVE-2003-1378
2007-10-19 10:00:00
CVE-2002-0077
2002-03-30 05:00:00
cert
cert
nvd
nvd
CVE-2002-0077
2002-01-13 05:00:00
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:C/I:C/A:N
7.2 High
AI Score
Confidence
Low
0.239 Low
EPSS
Percentile
96.6%
Related for NVD:CVE-2003-1378