Skip to content
Fencer Vulns
medium 5.0

CVE-2004-0502 json

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the origina…

published 2004-06-03 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0501

cvss
5.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
20.2%
EPSS 20.2% chance of exploitation in 30 days, percentile 97%
public exploits
1
Exploit-DB

Summary

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.

Timeline

  1. First public exploit (EDB-24101)
  2. Published

Exploit prediction

20.17% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-24101 Microsoft Outlook 2003 - Predictable File Location remote, 2004-05-10
  • securityfocus.com http://www.securityfocus.com/bid/10307 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.