NVD

Id
80052  
Name
CVE-2002-1056  
Description
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-05-16  
Modified Date
2016-10-17  
Seq
2002-1056  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399098 80052 CVE-2002-1056 20020331 More Office XP Problems  View
399099 80052 CVE-2002-1056 20020403 More Office XP problems (Version 2.0)  View
399100 80052 CVE-2002-1056 oval:org.mitre.oval:def:205  View
399101 80052 CVE-2002-1056 oval:org.mitre.oval:def:429  View
399102 80052 CVE-2002-1056 outlook-object-execute-script(8708)  View
399103 80052 CVE-2002-1056 MS02-021  View
399104 80052 CVE-2002-1056 4397  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63745 JVNDB-2002-000072 Microsoft Outlook におけるスクリプト自動実行の脆弱性 Microsoft Outlook において、電子メールの編集に Microsoft Word を使用しており、かつHTML 形式で記述されたメール内にスクリプトが組み込まれている場合に、そのスクリプトを自動実行してしまう脆弱性が存在します。 CVE-2002-1056 5444 CVE-2002-1056 80052 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000072.html 2002-03-31 2007-04-01 View