CVE-2004-0501 Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) e...
MediumCVSS 5.0
EPSS 18.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft outlook | = 2003 | No fix listed |
References
- 20040511 PING: Outlook 2003 Spam mailing-list
- 20040604 RE: PING: Outlook 2003 Spam mailing-list
- 20040604 RE: PING: Outlook 2003 Spam mailing-list
- 10323 exploit vdb-entry vendor-advisory
- outlook-vml-obtain-information(16116) vdb-entry