CVE-2003-1378
Microsoft Outlook and Outlook Express - Remote Code Execution via HTML Email CODEBASE Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1378. PoCs published by http-equiv.
AI-analyzed exploit summary This exploit leverages a vulnerability in Microsoft Outlook and Outlook Express where arbitrary programs can be executed through objects embedded in HTML email messages. The exploit uses a CODEBASE reference and non-zero CLASSID value to execute an executable file from a known path.
Description
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Exploits (1)
This exploit leverages a vulnerability in Microsoft Outlook and Outlook Express where arbitrary programs can be executed through objects embedded in HTML email messages. The exploit uses a CODEBASE reference and non-zero CLASSID value to execute an executable file from a known path.