CVE

Id
10908  
CVE No.
CVE-2004-2482  
Status
Candidate  
Description
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.  
Phase
Assigned (20050821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
76269 10908 CVE-2004-2482 BUGTRAQ:20040708 Microsoft Word Email Object Data Vulnerability  View
76270 10908 CVE-2004-2482 URL:http://www.securityfocus.com/archive/1/368492  View
76271 10908 CVE-2004-2482 BID:10683  View
76272 10908 CVE-2004-2482 URL:http://www.securityfocus.com/bid/10683  View
76273 10908 CVE-2004-2482 OSVDB:7769  View
76274 10908 CVE-2004-2482 URL:http://www.osvdb.org/7769  View
76275 10908 CVE-2004-2482 SECUNIA:12041  View
76276 10908 CVE-2004-2482 URL:http://secunia.com/advisories/12041  View
76277 10908 CVE-2004-2482 XF:microsoft-object-gain-access(16663)  View

Related JVN