PT-2002-2062 · Microsoft · Outlook+1

Published 2002-05-16 · Updated 2018-10-12 · CVE-2002-1056

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2000 and 2002

Description: The issue allows remote attackers to execute arbitrary scripts via an email that the user forwards or replies to, when Microsoft Outlook is configured to use Microsoft Word as the email editor and the email message is in HTML or Rich Text Format (RTF).

Recommendations: For Microsoft Outlook 2000, consider disabling the use of Microsoft Word as the email editor until a fix is available. For Microsoft Outlook 2002, consider disabling the use of Microsoft Word as the email editor until a fix is available.

Fix

Related Identifiers

CVE-2002-1056

Affected Products

Outlook

Office Word

References · 9

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1056 · Security Note
• http://online.securityfocus.com/archive/1/265621 · Note
• http://marc.info/?l=bugtraq&m=101760380418890&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A429 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1056 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A205 · Note
• http://iss.net/security_center/static/8708.php · Note
• http://securityfocus.com/bid/4397 · Note