CVE-2002-0481

medium Microsoft
CVSS v3 Base Score
5.1
AV:N/AC:H/Au:N/C:P/I:P/A:P
EPSS Score
6.4%
Exploitation probability in 30 days
Top 9% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
High
Confidentiality
P
Integrity
P
Availability
P
Published: August 12, 2002 (8676 days ago)
Last Modified: April 16, 2026
Vendor: Microsoft
Source: NVD

Description

An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function.

CWE

NVD-CWE-Other

Affected Products

microsoft outlook

References

🔗 online.securityfocus.com 🔗 www.iss.net 🔗 www.securityfocus.com 🔗 online.securityfocus.com 🔗 www.iss.net