CVE-2004-0502
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 20.17% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/outlook
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=108420583612655&w=2
- http://marc.info/?l=bugtraq&m=108637351805607&w=2
- http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
- http://secunia.com/advisories/11572
- http://www.securityfocus.com/bid/10307Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16104
- http://marc.info/?l=bugtraq&m=108420583612655&w=2
- http://marc.info/?l=bugtraq&m=108637351805607&w=2
- http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
- http://secunia.com/advisories/11572
- http://www.securityfocus.com/bid/10307Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16104
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.