Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:outlook:2003:sp1:*:*:*:*:*:*

part: a version: 2003 update: sp1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductOutlook (bef301cd-241a-53cf-ae40-2970e33f8d57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2055 vulnerable 2026-06-08 04:48:58.702276 Details available
Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API.
Published: 2006-04-26T20:00:00.000Z
Updated: 2024-08-07T17:35:31.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.