Unscored severity · published Dec 31, 2003
CVE-2003-1378
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the…
–
CVSS
15.6%
EPSS
No
On KEV
Description
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
2000; 2000; 2000 · source: NVD
OE
Outlook Express · Microsoft
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1378
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1378
Exploit
http://www.securityfocus.com/archive/1/312910
www.securityfocus.com
http://www.securityfocus.com/archive/1/312929
Exploit
http://www.securityfocus.com/bid/6923
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11411
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability