Unscored severity · published May 16, 2002
CVE-2002-1056
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text…
–
CVSS
18.5%
EPSS
No
On KEV
Description
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
Exploitation
Is it being used?
Exploit prediction (EPSS)18.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
2000; 2002 · source: NVD
WO
Word · Microsoft
2000; 2000; 2000; 2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1056
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1056
marc.info
http://marc.info/?l=bugtraq&m=101760380418890&w=2
online.securityfocus.com
http://online.securityfocus.com/archive/1/265621
www.iss.net
http://www.iss.net/security_center/static/8708.php
www.securityfocus.com
http://www.securityfocus.com/bid/4397
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-021
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A205
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability