CVE-2001-0538 Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
HighCVSS 10.0
EPSS 52.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft outlook | <= 2002 | No fix listed |
References
- 20010712 MS Office XP - the more money I give to Microsoft, the more vulnerable my Windows computers are mailing-list
- L-113 government-resource third-party-advisory
- VU#131569 third-party-advisory us-government-resource
- 20010712 Vulnerability in IE/Outlook ActiveX control mailing-list
- 3025 vdb-entry
- MS01-038 vendor-advisory
- outlook-activex-view-control(6831) vdb-entry