PT-2004-1638 · Microsoft · Outlook+1

Published 2004-06-08 · Updated 2021-07-23 · CVE-2004-0526

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified) Outlook (affected versions not specified)

Description The issue allows remote attackers to spoof a legitimate URL in the status bar, facilitating a phishing attack. This is achieved by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site.

Recommendations For Internet Explorer, consider disabling the use of image maps in conjunction with modified alt values until a fix is available. For Outlook, restrict the display of external images to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-0526

Affected Products

Internet Explorer

Outlook

References · 7

• 🔥 http://securityfocus.com/bid/10308 · Exploit
• 🔥 https://exploit-db.com/exploits/24102 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0526 · Security Note
• http://marc.info/?l=bugtraq&m=108422905510713&w=2 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html · Note
• http://kurczaba.com/securityadvisories/0405132poc.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 · Note