CVE-2003-1378

Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.

CVSS v2.0 8.8 HIGH

8.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:N

Exploitability : 8.6 / Impact : 9.2

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/archive/1/312910	Exploit
http://www.securityfocus.com/archive/1/312929
http://www.securityfocus.com/bid/6923	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/11411
http://www.securityfocus.com/archive/1/312910	Exploit
http://www.securityfocus.com/archive/1/312929
http://www.securityfocus.com/bid/6923	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/11411

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:outlook:2000:::::::*
	cpe:2.3:a:microsoft:outlook:2000:sp2::::::
	cpe:2.3:a:microsoft:outlook:2000:sr1::::::
	cpe:2.3:a:microsoft:outlook_express:6.0:::::::*

History

20 Nov 2024, 23:46

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/archive/1/312910 - Exploit~~	() http://www.securityfocus.com/archive/1/312910 - Exploit
References	~~() http://www.securityfocus.com/archive/1/312929 -~~	() http://www.securityfocus.com/archive/1/312929 -
References	~~() http://www.securityfocus.com/bid/6923 - Exploit~~	() http://www.securityfocus.com/bid/6923 - Exploit
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/11411 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/11411 -

Information

Published : 2003-12-31 05:00

Updated : 2024-11-20 23:46

NVD link : CVE-2003-1378

Mitre link : CVE-2003-1378

CVE.ORG link : CVE-2003-1378

JSON object : View

Products Affected

microsoft

outlook
outlook_express

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2003-1378", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:N", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2003-12-31T05:00:00.000", "references": [{"url": "http://www.securityfocus.com/archive/1/312910", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/312929", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/6923", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11411", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/312910", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/archive/1/312929", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/6923", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11411", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077."}], "lastModified": "2024-11-20T23:46:59.937", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D52F17AB-2C87-4C1A-91B5-267ABBCF5844"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2000:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A343E57-CF86-4500-96D2-7172B93808BE"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2000:sr1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A5E941-25A7-405E-B330-8101D6829B43"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}