NVD

Id
70829  
Name
CVE-2004-0380  
Description
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-05-04  
Modified Date
2017-07-10  
Seq
2004-0380  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365330 70829 CVE-2004-0380 oval:org.mitre.oval:def:1010  View
365331 70829 CVE-2004-0380 oval:org.mitre.oval:def:1028  View
365332 70829 CVE-2004-0380 oval:org.mitre.oval:def:882  View
365333 70829 CVE-2004-0380 oval:org.mitre.oval:def:990  View
365334 70829 CVE-2004-0380 http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php  View
365335 70829 CVE-2004-0380 VU#323070  View
365336 70829 CVE-2004-0380 MS04-013  View
365337 70829 CVE-2004-0380 20040219 Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658)  View
365338 70829 CVE-2004-0380 20040328 IE ms-its: and mk:@MSITStore: vulnerability  View
365339 70829 CVE-2004-0380 9105  View
365340 70829 CVE-2004-0380 9658  View
365341 70829 CVE-2004-0380 TA04-104A  View
365342 70829 CVE-2004-0380 outlook-mhtml-execute-code(15705)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62703 JVNDB-2004-000044 Microsoft Outlook Express の MHTML プロトコルハンドラにおける任意のスクリプトを実行される脆弱性 Microsoft Outlook Express および Microsoft Internet Explorer が利用する MHTML プロトコルハンドラには、クロスドメインセキュリティチェックを回避される脆弱性が存在します。 CVE-2004-0380 8807 CVE-2004-0380 70829 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000044.html 2004-02-13 2007-04-01 View