CVE-2004-0502 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 20.2% (pctl 97)
Patch early
A public exploit exists.
Description
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 20.17% — more likely to be exploited than 97% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-08-18 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | outlook |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Outlook 2003 - Predictable File Location | 2004-05-10 |
References
- http://marc.info/?l=bugtraq&m=108420583612655&w=2
- http://marc.info/?l=bugtraq&m=108637351805607&w=2
- http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
- http://secunia.com/advisories/11572
- http://www.securityfocus.com/bid/10307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16104
- http://marc.info/?l=bugtraq&m=108420583612655&w=2
- http://marc.info/?l=bugtraq&m=108637351805607&w=2
- http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
- http://secunia.com/advisories/11572
- http://www.securityfocus.com/bid/10307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16104
→ the Explorer · watch your stack · NVD