NVD

Id
70937  
Name
CVE-2004-0501  
Description
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2004-08-18  
Modified Date
2017-07-10  
Seq
2004-0501  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366075 70937 CVE-2004-0501 20040511 PING: Outlook 2003 Spam  View
366076 70937 CVE-2004-0501 20040604 RE: PING: Outlook 2003 Spam  View
366077 70937 CVE-2004-0501 20040604 RE: PING: Outlook 2003 Spam  View
366078 70937 CVE-2004-0501 10323  View
366079 70937 CVE-2004-0501 outlook-vml-obtain-information(16116)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62843 JVNDB-2004-000185 Microsoft Outlook における画像の自動ダウンロードの設定回避の脆弱性 Microsoft Outlook に実装されている [画像の自動ダウンロードの設定] 機能にはセキュリティ上の不備のため、ブロックの設定を回避して vmlframe を利用した送信者への開封通知を許してしまう脆弱性が存在します。 CVE-2004-0501 8928 CVE-2004-0501 70937 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000185.html 2004-05-11 2007-04-01 View