CVEvulnerability
CVE-2003-1378
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.8 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:N
- Weaknesses
- CWE-264
Description
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Affected configurations
• microsoft outlook 2000
• microsoft outlook express 6.0
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/archive/1/312910 Exploit
- http://www.securityfocus.com/archive/1/312929 www.securityfocus.com
- http://www.securityfocus.com/bid/6923 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11411 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/archive/1/312910 Exploit
- http://www.securityfocus.com/archive/1/312929 www.securityfocus.com
- http://www.securityfocus.com/bid/6923 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11411 exchange.xforce.ibmcloud.com