CVE-2004-0526

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-06-08 · updated 2026-06-16

Description

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

Affected products

Microsoft Ie: 6.0-sp1
Microsoft Internet Explorer 11: 5.0, 5.0.1, 5.0.1-sp1, 5.0.1-sp2, 5.0.1-sp3, 5.0.1-sp4 (+4)
Microsoft Outlook: 97, 98, 2000, 2000-sp2, 2000-sp3, 2000-sr1 (+5)
Microsoft Outlook Express: 4.0, 4.01-sp2, 4.27.3110, 4.72.2106, 4.72.3120.0, 4.72.3612 (+4)

References

http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html
http://marc.info/?l=bugtraq&m=108422905510713&w=2
http://www.kurczaba.com/securityadvisories/0405132poc.htm
http://www.securityfocus.com/bid/10308
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html
http://marc.info/?l=bugtraq&m=108422905510713&w=2
http://www.kurczaba.com/securityadvisories/0405132poc.htm
http://www.securityfocus.com/bid/10308
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102

Get alerted when CVE-2004-0526 or the next vulnerability affects your stack