CVE

Id
5444  
CVE No.
CVE-2002-1056  
Status
Entry  
Description
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
29408 5444 CVE-2002-1056 BUGTRAQ:20020331 More Office XP Problems  View
29409 5444 CVE-2002-1056 URL:http://marc.info/?l=bugtraq&m=101760380418890&w=2  View
29410 5444 CVE-2002-1056 BUGTRAQ:20020403 More Office XP problems (Version 2.0)  View
29411 5444 CVE-2002-1056 URL:http://online.securityfocus.com/archive/1/265621  View
29412 5444 CVE-2002-1056 MS:MS02-021  View
29413 5444 CVE-2002-1056 URL:http://www.microsoft.com/technet/security/bulletin/ms02-021.asp  View
29414 5444 CVE-2002-1056 BID:4397  View
29415 5444 CVE-2002-1056 URL:http://www.securityfocus.com/bid/4397  View
29416 5444 CVE-2002-1056 OVAL:oval:org.mitre.oval:def:205  View
29417 5444 CVE-2002-1056 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:205  View
29418 5444 CVE-2002-1056 OVAL:oval:org.mitre.oval:def:429  View
29419 5444 CVE-2002-1056 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:429  View
29420 5444 CVE-2002-1056 XF:outlook-object-execute-script(8708)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63745 JVNDB-2002-000072 Microsoft Outlook におけるスクリプト自動実行の脆弱性 Microsoft Outlook において、電子メールの編集に Microsoft Word を使用しており、かつHTML 形式で記述されたメール内にスクリプトが組み込まれている場合に、そのスクリプトを自動実行してしまう脆弱性が存在します。 CVE-2002-1056 5444 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000072.html  View