Lucene search

K
cve[email protected]CVE-2004-0502
HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0502

2004-08-1804:00:00
web.nvd.nist.gov
25
cve-2004-0502
outlook 2003
predictable location
remote attack
zone restrictions
exploit
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.2%

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the “src” of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.

Affected configurations

NVD
Node
microsoftoutlookMatch2003

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.2%

Related for CVE-2004-0502