VulnerabilityModified
CVE-2001-0145
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.
HIGH 7.5EPSS 6.70%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 6.70% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/outlook · microsoft/outlook express
- Source
- cve@mitre.org
References
- http://www.atstake.com/research/advisories/2001/a022301-1.txtPatch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012
- http://www.atstake.com/research/advisories/2001/a022301-1.txtPatch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.