CVE-2001-0538
Microsoft Outlook < 2002 - Remote Code Execution via Malicious HTML Email or Web Page
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0538. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages an unsafe ActiveX control in Microsoft Outlook XP to access and manipulate user emails via scripting. It demonstrates reading email content and executing arbitrary commands through WScript.Shell.
Description
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
Exploits (2)
This exploit leverages an unsafe ActiveX control in Microsoft Outlook XP to access and manipulate user emails via scripting. It demonstrates reading email content and executing arbitrary commands through WScript.Shell.
This exploit leverages the 'Microsoft Outlook View Control' ActiveX control, marked as 'safe for scripting', to execute arbitrary commands via WScript.Shell. It demonstrates command execution by running a directory listing command.