CVE-2002-1056
First published: Thu May 16 2002(Updated: )
Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Outlook | =2000 | |
| Microsoft Office Word | =2000 | |
| Microsoft Office Word | =2000-sr1a | |
| Microsoft Office Word | =2002 | |
| Microsoft Outlook | =2002 | |
| Microsoft Office Word | =2000-sr1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://online.securityfocus.com/archive/1/265621
- http://www.securityfocus.com/bid/4397
- http://www.iss.net/security_center/static/8708.php
- http://marc.info/?l=bugtraq&m=101760380418890&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A429
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A205
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-021
Frequently Asked Questions
What is the severity of CVE-2002-1056?
CVE-2002-1056 is considered a moderate severity vulnerability due to its potential to allow arbitrary script execution.
How do I fix CVE-2002-1056?
To mitigate CVE-2002-1056, you should disable the use of Microsoft Word as the email editor in Outlook or apply any available patches from Microsoft.
Which versions of Microsoft Outlook are affected by CVE-2002-1056?
CVE-2002-1056 affects Microsoft Outlook 2000 and 2002 when configured to use Word as the email editor.
What impact does CVE-2002-1056 have on users?
CVE-2002-1056 allows attackers to execute arbitrary scripts on the user's machine through crafted email messages.
Is CVE-2002-1056 related to any versions of Microsoft Word?
Yes, CVE-2002-1056 also affects Microsoft Word 2000 and 2002 when used as the email editor in Outlook.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft outlook
- version/microsoft outlook/2000
- canonical/microsoft office word
- version/microsoft office word/2000
- version/microsoft office word/2000-sr1a
- version/microsoft office word/2002
- version/microsoft outlook/2002
- version/microsoft office word/2000-sr1