Unscored severity · published Aug 12, 2002
CVE-2002-0481
An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML…
–
CVSS
10.1%
EPSS
No
On KEV
Description
An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.1% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0481
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0481
Vendor Advisory
http://online.securityfocus.com/archive/1/263429
Vendor Advisory
http://www.iss.net/security_center/static/8604.php
Patch
http://www.securityfocus.com/bid/4340
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability