CVE-2004-0503
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-0503
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Outlook 2003媒体文件脚本执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Outlook 2003是流行的邮件处理程序。 Microsoft Outlook 2003在执行媒体文件中的脚本时存在设计错误，远程攻击者可以利用这个漏洞以用户进程权限执行系统上的任意文件。 Microsoft Outlook 2003虽然在限制区域对Active X控件执行，脚本执行和文件下载作了限制，但是攻击者可以通过简单的嵌入OLE对象到Windows媒体播放文件，可绕过限制执行目标机器上已知文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-0503
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-0503
请登录查看更多情报信息。
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.htmlmailing-listx_refsource_FULLDISC
- https://nvd.nist.gov/vuln/detail/CVE-2004-0503
Same Patch Batch · n/a · 2004-06-03 · 32 CVEs total
| CVE-2004-0501 | Microsoft Outlook邮件客户端E-MAIL地址校验漏洞 | |
| CVE-2004-0523 | MIT Kerberos 5 KRB5_AName_To_Localname多个principal名缓冲区溢出漏洞 | |
| CVE-2004-0521 | SquirrelMail未明SQL注入漏洞 | |
| CVE-2004-0520 | SquirrelMail Email头HTML注入漏洞 | |
| CVE-2004-0519 | SquirrelMail文件夹名称跨站脚本漏洞 | |
| CVE-2004-0518 | Mac OS X 漏洞Mac OS X AppleFileServer漏洞 | |
| CVE-2004-0517 | Mac OS X漏洞 | |
| CVE-2004-0516 | Mac OS X漏洞 | |
| CVE-2004-0515 | Mac OS X漏洞 | |
| CVE-2004-0514 | Mac OS X漏洞 | |
| CVE-2004-0513 | Apple Mac OS X未明安全漏洞 | |
| CVE-2004-0507 | Ethereal协议解析器多个安全漏洞 | |
| CVE-2004-0506 | Ethereal协议解析器多个安全漏洞 | |
| CVE-2004-0505 | Ethereal协议解析器多个安全漏洞 | |
| CVE-2004-0504 | Ethereal协议解析器多个安全漏洞 | |
| CVE-2004-0502 | Microsoft Outlook 2003可预测文件位置弱点 | |
| CVE-2003-0193 | CatDoc XLSView本地不安全临时文件创建漏洞 | |
| CVE-2004-0490 | cPanel的本地权限提升漏洞 | |
| CVE-2004-0487 | Symantec Norton AntiVirus ActiveX控件远程代码执行漏洞 | |
| CVE-2004-0476 | 3Com OfficeConnect Remote 812 ADSL Router 端口缓冲区溢出漏洞 |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2004-0503
No comments yet