CVE-2004-2694
Microsoft Outlook Express 6.0 - Remote Content Loading via BASE HREF Target Bypass
Title source: llmDescription
Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108448627120764&w=2
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/11607
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/6121
Scores
EPSS
0.0856
EPSS Percentile
94.5%
Details
CWE
CWE-264
Status
published
Products (1)
microsoft/outlook_express
6.0
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026