VulnerabilityModified
CVE-2000-0621
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
HIGH 7.5EPSS 22.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 22.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 22.14% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/outlook · microsoft/outlook express
- Source
- cve@mitre.org
References
- http://www.cert.org/advisories/CA-2000-14.htmlPatch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/1501Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5013
- http://www.cert.org/advisories/CA-2000-14.htmlPatch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/1501Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5013
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.