CVE-2004-0121

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-88qv-6q9j-fhvv

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter...

References (20)

• http://marc.info/?l=bugtraq&m=107893704602842&w=2 Third Party Advisory
• http://www.ciac.org/ciac/bulletins/o-096.shtml Broken Link
• http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities Broken Link, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/305206 Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/9827 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.us-cert.gov/cas/techalerts/TA04-070A.html Broken Link, Third Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-009 Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15414 Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15429 Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A843 Broken Link
• http://marc.info/?l=bugtraq&m=107893704602842&w=2 Third Party Advisory
• http://www.ciac.org/ciac/bulletins/o-096.shtml Broken Link
• http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities Broken Link, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/305206 Mitigation, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/9827 Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory