Vulnerability · NVD

CVE-2004-0121

CVE-2004-0121, Severity pending severity (CVSS —): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 47.7 %
Tracked apps: 3
Still exposed: 0

Public exploit : ExploitDB Published on 2004-04-15

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

EPSS 47.68% moderate exploit risk percentile 98.8%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Office macOS brew:cask:microsoft-office

Affected - Fixed in - Latest tracked 16.114.26101123 undetermined
Microsoft Outlook macOS com.microsoft.Outlook

Affected - Fixed in - Latest tracked 16.114 undetermined
Office Windows winget:Microsoft.Office

Affected - Fixed in - Latest tracked - undetermined

Vulnerable CPE configurations (4)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:xp:sp2::::::
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:xp:sp2::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2002:sp2::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2002:sp2::::::

View on NVD ↗ Advisory · docs.microsoft.com Advisory · www.kb.cert.org

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM