CVE-2003-0007 Security feature bypass in n/a
Attackers can read encrypted emails sent by Microsoft Outlook 2002 users because the application fails to properly handle V1 Exchange Server Security certificates.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2003-0007?
CVE-2003-0007 is a medium-severity vulnerability in Microsoft Outlook, published on 1 Sep 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
Which versions are affected by CVE-2003-0007?
It affects 1 product.
Products include Microsoft Outlook.
How do I fix CVE-2003-0007?
No fix has been published for CVE-2003-0007 yet. Limit exposure of the affected software until one is available.
Is CVE-2003-0007 being exploited?
There is no known exploitation of CVE-2003-0007 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Outlook
Sources
Also known as GHSA-qxm8-rmh7-7qjh.