CVE-2004-2482: microsoft outlook
Vulnerability summary
CVE-2004-2482 is a medium (CVSS 5.0) vulnerability in microsoft outlook. EPSS estimates a 12.76% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities.
Timeline
- 21-08-2005PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.76%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.76% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- outlook2000 | 2003
1 vendor · 1 product