NVD

Id
70585  
Name
CVE-2004-0121  
Description
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2004-04-15  
Modified Date
2016-10-17  
Seq
2004-0121  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
363963 70585 CVE-2004-0121 20040310 Outlook mailto: URL argument injection vulnerability  View
363964 70585 CVE-2004-0121 oval:org.mitre.oval:def:843  View
363965 70585 CVE-2004-0121 O-096  View
363966 70585 CVE-2004-0121 20040309 Microsoft Outlook "mailto:" Parameter Passing Vulnerability  View
363967 70585 CVE-2004-0121 VU#305206  View
363968 70585 CVE-2004-0121 MS04-009  View
363969 70585 CVE-2004-0121 9827  View
363970 70585 CVE-2004-0121 TA04-070A  View
363971 70585 CVE-2004-0121 outlook-mailtourl-execute-code(15414)  View
363972 70585 CVE-2004-0121 outlook-ms04009-patch(15429)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62732 JVNDB-2004-000073 Microsoft Outlook の mailto URL の処理における任意のスクリプトを実行される脆弱性 Microsoft Outlook には、文字列 """ を含む mailto URL を解釈した際に、任意のコマンドラインスイッチを指定可能である脆弱性が存在します。 CVE-2004-0121 8548 CVE-2004-0121 70585 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000073.html 2004-03-09 2007-04-01 View