Unscored CVE-2002-1056 EUVD-2002-1045GHSA-hxxf-r7jv-rrcj

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while edit…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.

References

oval:org.mitre.oval:def:429 vdb-entry signature
4397 vdb-entry
MS02-021 vendor-advisory
20020331 More Office XP Problems mailing-list
20020403 More Office XP problems (Version 2.0) mailing-list
oval:org.mitre.oval:def:205 vdb-entry signature
outlook-object-execute-script(8708) vdb-entry