Unscored severity · published Aug 14, 2001
CVE-2001-0538
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page
–
CVSS
52.9%
EPSS
No
On KEV
Description
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
Exploitation
Is it being used?
Exploit prediction (EPSS)52.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
through 2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0538
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0538
marc.info
http://marc.info/?l=bugtraq&m=99496431214078&w=2
www.ciac.org
http://www.ciac.org/ciac/bulletins/l-113.shtml
US Government Resource
http://www.kb.cert.org/vuls/id/131569
www.ntbugtraq.com
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=862
www.securityfocus.com
http://www.securityfocus.com/bid/3025
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability