Vulnerabilities > CVE-2001-0538 - Unspecified vulnerability in Microsoft Outlook

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

microsoft

critical

exploit available

NVD

Published: 2001-08-14

Updated: 2018-10-12

Summary

Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Outlook - Microsoft Outlook 3.12.0 Microsoft Outlook 3.13.0 Microsoft Outlook 3.14.0 Microsoft Outlook 3.15.0 Microsoft Outlook 3.16.0 Microsoft Outlook 3.17.0 Microsoft Outlook 3.17.1 Microsoft Outlook 3.18.0 Microsoft Outlook 3.20.0 Microsoft Outlook 3.21.0 Microsoft Outlook 3.22.0 Microsoft Outlook 3.22.1 Microsoft Outlook 3.23.0 Microsoft Outlook 3.24.0 Microsoft Outlook 3.24.1 Microsoft Outlook 3.25.0 Microsoft Outlook 3.26.0 Microsoft Outlook 3.27.0 Microsoft Outlook 3.27.1 Microsoft Outlook 3.28.0 Microsoft Outlook 3.29.0 Microsoft Outlook 3.30.0 Microsoft Outlook 3.31.0 Microsoft Outlook 3.32.0 Microsoft Outlook 3.33.0 Microsoft Outlook 97 Microsoft Outlook 98 Microsoft Outlook 2000 Microsoft Outlook 2002	38

Exploit-Db

description	Microsoft Outlook 98/2000/2002 Unauthorized Email Access Vulnerability. CVE-2001-0538. Remote exploit for windows platform
id	EDB-ID:21003
last seen	2016-02-02
modified	2001-07-12
published	2001-07-12
reporter	Georgi Guninski
source	https://www.exploit-db.com/download/21003/
title	Microsoft Outlook 98/2000/2002 Unauthorized Email Access Vulnerability

description	Microsoft Outlook 98/2000/2002 Arbitrary Code Execution Vulnerability. CVE-2001-0538. Remote exploit for windows platform
id	EDB-ID:21004
last seen	2016-02-02
modified	2001-07-12
published	2001-07-12
reporter	Georgi Guninski
source	https://www.exploit-db.com/download/21004/
title	Microsoft Outlook 98/2000/2002 - Arbitrary Code Execution Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References