Unscored severity · published Dec 31, 2002
CVE-2002-2100
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious…
–
CVSS
11.4%
EPSS
No
On KEV
Description
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
2000; 2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2100
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2100
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html
www.iss.net
http://www.iss.net/security_center/static/8611.php
www.securityfocus.com
http://www.securityfocus.com/bid/4334
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability