Vulnerability Details : CVE-2003-1378
Potential exploit
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Products affected by CVE-2003-1378
- cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2000:sr1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2000:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-1378
34.47%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 97 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-1378
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.8
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:N |
8.6
|
9.2
|
NIST |
CWE ids for CVE-2003-1378
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2003-1378
Jump to