Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

The remote host is missing a critical Microsoft Windows Security Update (835732).

This update fixes various flaws that could allow an attacker to execute arbitrary code on the remote host.

A series of worms (Sasser) are known to exploit this vulnerability in the wild.

The remote host is running a version of outlook that could allow Internet Explorer to execute script code in the Local Machine zone and therefore let an attacker execute arbitrary programs on this host.

To exploit this bug, an attacker would need to send an special HTML message to a user of this host.

ID	Name	Product	Family	Severity
12205	MS04-011: Microsoft Hotfix (credentialed check) (835732)	Nessus	Windows : Microsoft Bulletins	critical
12092	MS04-009: Vulnerability in Outlook could allow code execution (828040)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2004-0121

critical

Tenable Plugins

critical

high