Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2002-1056

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.

  • Published: May 16, 2002
  • Updated: Apr 13, 2023
  • CVE: CVE-2002-1056
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / outlook 2000 2000.x
microsoft / word 2000 2000.x
microsoft / word 2000-sr1a 2000-sr1a.x
microsoft / word 2002 2002.x
microsoft / outlook 2002 2002.x
microsoft / word 2000-sr1 2000-sr1.x