CVE-2004-2482: Medium severity Microsoft Outlook vulnerability
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2482?
CVE-2004-2482 is considered a moderate severity vulnerability that can lead to information disclosure.
How do I fix CVE-2004-2482?
To mitigate CVE-2004-2482, users should update to the latest patches for Microsoft Outlook 2000 and 2003.
Who is affected by CVE-2004-2482?
CVE-2004-2482 affects users of Microsoft Outlook 2000 and 2003 that are configured to use Microsoft Word as their email editor.
What are the potential consequences of CVE-2004-2482?
The consequence of CVE-2004-2482 can include the automatic downloading of malicious content when an email is forwarded.
Is CVE-2004-2482 easy to exploit?
Exploitation of CVE-2004-2482 can be conducted through specially crafted emails, making it relatively easy for attackers.