microsoft outlook 2000 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote malicious users to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.

Microsoft Outlook Express 4.01 Microsoft Outlook Express 5.0 Microsoft Outlook Express 5.0.1 Microsoft Outlook 2000 Microsoft Outlook 97 Microsoft Outlook 98 Microsoft Outlook Express 4.0

5

CVSSv2

Buffer overflow in Microsoft Outlook and Outlook Express allows remote malicious users to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability.

Microsoft Outlook 2000 Microsoft Outlook Express 4.0 Microsoft Outlook Express 4.01 Microsoft Outlook 97 Microsoft Outlook 98 Microsoft Outlook Express 5.0

2 EDB exploits

5

CVSSv2

Buffer overflow in Outlook Express 4.x allows malicious users to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.

Microsoft Outlook Express 4.01 Microsoft Outlook Express 4.72.2106.4 Microsoft Outlook Express 4.72.3120.0 Microsoft Outlook Express 4.72.3612.1700 Microsoft Outlook 98 Microsoft Outlook Express 4.0 Microsoft Outlook Express 4.27.3110.1

5

CVSSv2

The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files.

Microsoft Outlook 97 Microsoft Outlook 98 Microsoft Outlook 2000

5

CVSSv2

Microsoft Outlook Express allows remote malicious users to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability.

Microsoft Outlook Express 4.0 Microsoft Outlook Express 4.01 Microsoft Outlook Express 5.0 Microsoft Outlook Express 5.0.1

1 EDB exploit

5.1

CVSSv2

A Microsoft ActiveX control allows a remote malicious user to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.

Microsoft Ie 4.1 Microsoft Outlook 98 Microsoft Outlook Express 4.27.3110.1 Microsoft Internet Explorer 4.0 Microsoft Ie 4.0.1 Microsoft Ie 5.0 Microsoft Outlook Express 4.72.2106.4 Microsoft Outlook Express 4.72.3120.0 Microsoft Outlook Express 4.72.3612.1700 Microsoft Outlook Express 5.0 Microsoft Ie 4.0 Microsoft Ie 5 Microsoft Outlook 2000

1 EDB exploit

4.3

CVSSv2

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote malicious users to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients...

Microsoft Office 2000 Microsoft Outlook 2000 Microsoft Outlook 2002 Microsoft Office Xp Microsoft Office 2003 Microsoft Outlook 2003

9.3

CVSSv2

Microsoft Outlook 2002 and 2003 allows user-assisted remote malicious users to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.

Microsoft Office 2000 Microsoft Outlook 2000 Microsoft Office Xp Microsoft Outlook 2002 Microsoft Office 2003 Microsoft Outlook 2003

9.3

CVSSv2

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote malicious users to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook...

Microsoft Office 2000 Microsoft Outlook 2000 Microsoft Office Xp Microsoft Outlook 2002 Microsoft Office 2003 Microsoft Outlook 2003

7.5

CVSSv2

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote malicious users to execute arbitrary scripts via an email that...

Microsoft Outlook 2000 Microsoft Outlook 2002 Microsoft Word 2000 Microsoft Word 2002

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook