What’s Vulnerable › Vulnerabilities
CVE-2004-0502
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 20.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2004-08-18 · updated 2026-06-16
Description
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
Affected products
- Microsoft Outlook: 2003
References
- http://marc.info/?l=bugtraq&m=108420583612655&w=2
- http://marc.info/?l=bugtraq&m=108637351805607&w=2
- http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
- http://secunia.com/advisories/11572
- http://www.securityfocus.com/bid/10307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16104
- http://marc.info/?l=bugtraq&m=108420583612655&w=2
- http://marc.info/?l=bugtraq&m=108637351805607&w=2
- http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
- http://secunia.com/advisories/11572
- http://www.securityfocus.com/bid/10307
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16104
Get alerted when CVE-2004-0502 or the next vulnerability affects your stack