high8.8Public exploit code
CVE-2003-1378
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Outlook2000/Express 6.0 - Arbitrary Program Execution2003-02-24 · remote · windows · Verified
Impact
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Outlook | Version 2000 |
| Microsoft | Outlook Express | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/312910
- http://www.securityfocus.com/archive/1/312929
- http://www.securityfocus.com/bid/6923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11411
- http://www.securityfocus.com/archive/1/312910
- http://www.securityfocus.com/archive/1/312929
- http://www.securityfocus.com/bid/6923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11411