CVE-2004-0380: microsoft outlook_express

EPSS trend

Probability

63.25%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 63.25% on 20-09-2026

20-09-202620-10-2026

EPSS score

63.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Outlook Express 6.0 - '.MHTML' Forced File Execution (1)
Maturity: weaponized

Show all 4 exploits

exploit-databaseremotewindowsVerified
Microsoft Outlook Express 6.0 - MHTML Forced File Execution (2)
Maturity: weaponized

References

14 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A990VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/9105VDB EntryX Refsource BID
www.kb.cert.org/vuls/id/323070Third Party AdvisoryX Refsource CERT VNUS Government Resource
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1010VDB EntrySignatureX Refsource OVAL
exchange.xforce.ibmcloud.com/vulnerabilities/15705VDB EntryX Refsource XF
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-013Vendor AdvisoryX Refsource MS
www.securityfocus.com/bid/9658VDB EntryX Refsource BID
www.us-cert.gov/cas/techalerts/TA04-104A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A882VDB EntrySignatureX Refsource OVAL
www.k-otik.net/bugtraq/02.18.InternetExplorer.phpX Refsource MISC

Show all 14 references

www.securityfocus.com/archive/1/358913Mailing ListX Refsource BUGTRAQExploitPatchVendor Advisory
www.securityfocus.com/archive/1/354447Mailing ListX Refsource BUGTRAQPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1028VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/10523Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2003-1378microsoftoutlook+115.58%19y ago19-10-2007 10:00Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.CVE-2003-0301microsoftoutlook_express5.98%23y ago15-05-2003 04:00The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.CVE-2003-0300microsoftoutlook_express+73.36%23y ago15-05-2003 04:00The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors.CVE-2007-2225microsoftoutlook_express25.04%19y ago12-06-2007 20:00A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."CVE-2007-2227microsoftoutlook_express25.04%19y ago12-06-2007 21:00The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."CVE-2007-3897microsoftoutlook_express+154.63%19y ago09-10-2007 22:00Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.

All vulnerabilities inoutlook_express

CVE-2004-0380: microsoft outlook_express

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References