CVE-2004-2482
Microsoft Outlook 2000 and 2003 - Remote Code Execution via Malformed OBJECT Tag
Title source: llmDescription
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16663
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/7769
Vendor Advisory mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/368492
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/12041
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/10683
Scores
EPSS
0.1276
EPSS Percentile
95.9%
Details
Status
published
Products (2)
microsoft/outlook
2000
microsoft/outlook
2003
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026