5

CVE-2004-0526

Exploit

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Ie Version6.0 Updatesp1
Microsoft ≫ Internet Explorer Version5.0
Microsoft ≫ Internet Explorer Version5.0.1
Microsoft ≫ Internet Explorer Version5.0.1 Updatesp1
Microsoft ≫ Internet Explorer Version5.0.1 Updatesp2
Microsoft ≫ Internet Explorer Version5.0.1 Updatesp3
Microsoft ≫ Internet Explorer Version5.0.1 Updatesp4
Microsoft ≫ Internet Explorer Version5.5
Microsoft ≫ Internet Explorer Version5.5 Updatesp1
Microsoft ≫ Internet Explorer Version5.5 Updatesp2
Microsoft ≫ Internet Explorer Version6.0
Microsoft ≫ Outlook Version97
Microsoft ≫ Outlook Version98
Microsoft ≫ Outlook Version2000
Microsoft ≫ Outlook Version2000 Updatesp2
Microsoft ≫ Outlook Version2000 Updatesp3
Microsoft ≫ Outlook Version2000 Updatesr1
Microsoft ≫ Outlook Version2002
Microsoft ≫ Outlook Version2002 Updatesp1
Microsoft ≫ Outlook Version2002 Updatesp2
Microsoft ≫ Outlook Version2002 Updatesp3
Microsoft ≫ Outlook Version2003
Microsoft ≫ Outlook Express Version4.0
Microsoft ≫ Outlook Express Version4.01 Updatesp2
Microsoft ≫ Outlook Express Version4.27.3110
Microsoft ≫ Outlook Express Version4.72.2106
Microsoft ≫ Outlook Express Version4.72.3120.0
Microsoft ≫ Outlook Express Version4.72.3612
Microsoft ≫ Outlook Express Version5.0
Microsoft ≫ Outlook Express Version5.0.1
Microsoft ≫ Outlook Express Version5.5
Microsoft ≫ Outlook Express Version6.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 52.26% 0.978
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N