vulnwire
5.1med

CVE-2002-0481

An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
5.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
10.1%
percentile 96%
Public exploits
0
none known

An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function.

Exploit prediction (EPSS)

10.06% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.1AV:N/AC:H/Au:N/C:P/I:P/A:P

References

  • online.securityfocus.com /archive/1/263429 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/4340 · vdb-entry, x_refsource_BID, x_transferred
  • iss.net /security_center/static/8604.php · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.