Test ID:	1.3.6.1.4.1.25623.1.0.12092
Category:	Windows
Title:	Vulnerability in Outlook could allow code execution (828040)
Summary:	NOSUMMARY
Description:	Description: The remote host is running a version of outlook which is vulnerable to a bug which may allow Internet Explorer to execute script code in the Local Machine zone and therefore let an attacker execute arbitrary programs on this host. To exploit this bug, an attacker would need to send an special HTML message to a user of this host. Solution : See http://www.microsoft.com/technet/security/bulletin/ms04-009.mspx Risk factor : High
Cross-Ref:	BugTraq ID: 9827 Common Vulnerability Exposure (CVE) ID: CVE-2004-0121 http://www.securityfocus.com/bid/9827 Bugtraq: 20040310 Outlook mailto: URL argument injection vulnerability (Google Search) http://marc.info/?l=bugtraq&m=107893704602842&w=2 Cert/CC Advisory: TA04-070A http://www.us-cert.gov/cas/techalerts/TA04-070A.html CERT/CC vulnerability note: VU#305206 http://www.kb.cert.org/vuls/id/305206 Computer Incident Advisory Center Bulletin: O-096 http://www.ciac.org/ciac/bulletins/o-096.shtml http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities Microsoft Security Bulletin: MS04-009 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-009 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A843 XForce ISS Database: outlook-mailtourl-execute-code(15414) https://exchange.xforce.ibmcloud.com/vulnerabilities/15414 XForce ISS Database: outlook-ms04009-patch(15429) https://exchange.xforce.ibmcloud.com/vulnerabilities/15429
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.