CVE-2004-0502: Medium severity Microsoft Outlook vulnerability
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0502?
CVE-2004-0502 has a moderate severity level due to its potential exploitation via predictable file storage locations.
How do I fix CVE-2004-0502?
To fix CVE-2004-0502, apply the latest security updates from Microsoft for Outlook 2003.
What is the impact of CVE-2004-0502?
The impact of CVE-2004-0502 allows remote attackers to exploit file storage vulnerabilities leading to unauthorized access.
Who is affected by CVE-2004-0502?
Users of Microsoft Outlook 2003 are affected by CVE-2004-0502 due to its default file storage locations.
Is CVE-2004-0502 still a threat today?
While CVE-2004-0502 is an older vulnerability, users should ensure they are not using outdated software to minimize risks.