CyberSec.Space Logo
Back to CVE Browser

CVE-2001-0538

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0210%
EPSS Percentile32.03th
PublishedAug 14, 2001
Last ModifiedApr 16, 2026

Vulnerability Description

Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.

Affected Platforms (CPE)

📦
Microsoft

Outlook

<= 2002

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=99496431214078&w=2
🔗 http://www.ciac.org/ciac/bulletins/l-113.shtml
🔗 http://www.kb.cert.org/vuls/id/131569
🔗 http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=862
🔗 http://www.securityfocus.com/bid/3025
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/6831
🔗 http://marc.info/?l=bugtraq&m=99496431214078&w=2

Related Vulnerabilities

CVE-2012-139110.0

Unspecified vulnerability in the mOffice - Outlook sync (com.innov8tion.isharesync) application 3.1 for Android has unknown impact...

CVE-2004-038010.0

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass do...

CVE-1999-096710.0

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource p...

CVE-2019-12059.8

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att...