CVE-2003-1378 Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to....
HighCVSS 8.8
EPSS 15.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft outlook | = 2000 | No fix listed |
| Microsoft outlook | = 2000-sp2 | No fix listed |
| Microsoft outlook | = 2000-sr1 | No fix listed |
| Microsoft outlook express | = 6.0 | No fix listed |
References
- 20030223 O UT LO OK E XPRE SS 6 .00 : broken exploit mailing-list
- 20030224 Re: O UT LO OK E XPRE SS 6 .00 : broken mailing-list
- 6923 exploit vdb-entry
- outlook-codebase-execute-programs(11411) vdb-entry