Unscored severity · published Apr 15, 2004
CVE-2004-0121
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which…
–
CVSS
47.7%
EPSS
No
On KEV
Description
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
Exploitation
Is it being used?
Exploit prediction (EPSS)47.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
xp · source: NVD
OU
Outlook · Microsoft
2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0121
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0121
Third Party Advisory
http://marc.info/?l=bugtraq&m=107893704602842&w=2
Broken Link
http://www.ciac.org/ciac/bulletins/o-096.shtml
Broken Link
http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities
Mitigation
http://www.kb.cert.org/vuls/id/305206
Broken Link
http://www.securityfocus.com/bid/9827
Broken Link
http://www.us-cert.gov/cas/techalerts/TA04-070A.html
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability