CVE-2003-1378
NoneCVSS
—
EPSS
15.6%
Published
Dec 31, 2003
CISA due date
—
The record
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-41974 Permission control vulnerability in service notifications. Impact: Successful… CWE-264
- CVE-2026-9368 A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. CWE-264
- CVE-2026-41962 Permission control vulnerability in the app management and control module. Impact… CWE-264
- CVE-2026-6878 A vulnerability was identified in ByteDance verl up to 0.7.0. CWE-264
- CVE-2026-6224 A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. CWE-264
- CVE-2026-6117 A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. CWE-264
- CVE-2026-20046 A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR… CWE-264
- CVE-2019-10709 AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow… CWE-264