Vulnerability in Microsoft Outlook
CVE-2000-0621
Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.
EPSS: 0.223 (97.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Outlook — versions 97, 98, 2000
- Microsoft Outlook_express — versions 4.0, 4.01, 5.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_CERT, third-party-advisory)
Frequently asked questions
- What is CVE-2000-0621?
- CVE-2000-0621 is a vulnerability in Microsoft Outlook. Published 2000-07-20.
- Is CVE-2000-0621 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.