Vulnerability in N/a

CVE-2004-0501

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the…

EPSS: 0.507 (97.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

20040604 RE: PING: Outlook 2003 Spam (mailing-list, x_refsource_BUGTRAQ)
outlook-vml-obtain-information(16116) (vdb-entry, x_refsource_XF)
20040511 PING: Outlook 2003 Spam (mailing-list, x_refsource_BUGTRAQ)
10323 (vdb-entry, x_refsource_BID)
20040604 RE: PING: Outlook 2003 Spam (mailing-list, x_refsource_NTBUGTRAQ)