Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2004-0121
HistorySep 01, 2004 - 4:00 a.m.

CVE-2004-0121

2004-09-0104:00:00
CWE-88
mitre
web.nvd.nist.gov
42
cve-2004-0121
microsoft outlook 2002
argument injection vulnerability
nvd
security
vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.718

Percentile

98.1%

JSON

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

Affected configurations

Nvd
Node
microsoftofficeMatchxpsp2
OR
microsoftoutlookMatch2002sp2
VendorProductVersionCPE
microsoftofficexpcpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*
microsoftoutlook2002cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*

Related

nvd 2
securityvulns 2
cert 1
cvelist 2
nessus 2
exploitdb 1
checkpoint_advisories 1
prion 1
ubuntucve 1
cve 1
debiancve 1
redhatcve 1
nvd
nvd
CVE-2004-0121
2004-04-15 04:00:00
CVE-2017-5078
2017-10-27 05:29:01
securityvulns
securityvulns
Microsoft Security Bulletin MS04-009
2004-03-10 00:00:00
iDEFENSE Security Advisory 03.09.04: Microsoft Outlook "mailto:" Parameter Passing Vulnerability
2004-03-10 00:00:00
cert
cert
Microsoft Outlook fails to properly filter parameters passed via "mailto:" URL
2004-03-09 00:00:00
cvelist
cvelist
CVE-2004-0121
2004-09-01 04:00:00
CVE-2017-5078
2017-10-27 05:00:00
nessus
nessus
MS04-009: Vulnerability in Outlook could allow code execution (828040)
2004-03-10 00:00:00
MS04-011: Microsoft Hotfix (credentialed check) (835732)
2004-04-13 00:00:00
exploitdb
exploitdb
Microsoft Outlook 2002 - 'Mailto' Quoting Zone Bypass
2004-03-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Outlook 2002 Script Execution (CVE-2004-0121)
2010-02-09 00:00:00
prion
prion
Command injection
2017-10-27 05:29:00
ubuntucve
ubuntucve
CVE-2017-5078
2017-10-27 00:00:00
cve
cve
CVE-2017-5078
2017-10-27 05:29:01
debiancve
debiancve
CVE-2017-5078
2017-10-27 05:29:00
redhatcve
redhatcve
CVE-2017-5078
2017-06-06 07:56:46

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.3

Confidence

High

EPSS

0.718

Percentile

98.1%

JSON
Related for CVE-2004-0121
nvd2securityvulns2cert1cvelist2nessus2exploitdb1checkpoint_advisories1prion1ubuntucve1cve1debiancve1redhatcve1