CVE-2004-0121

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling…

published September 1, 2004

CVSS

—

EPSS

48%

Percentile

98.8

In the wild

Unconfirmed

What it is

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.47676 · 98.8th percentile
Published: 2004-09-01T04:00Z

EPSS history

Timeline

01 SEP 04:00Z
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling…
cvelistv5