Unscored severity · published Aug 18, 2004
CVE-2004-0503
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE…
–
CVSS
11.4%
EPSS
No
On KEV
Description
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0503
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0503
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.html
marc.info
http://marc.info/?l=bugtraq&m=108483193328605&w=2
secunia.com
http://secunia.com/advisories/11629
www.osvdb.org
http://www.osvdb.org/6217
Exploit
http://www.securityfocus.com/bid/10369
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16173
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability