CVE-2000-0036

Medium

Published: 22/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.92%

89th percentile - higher than 89% of all known CVEs

Summary

Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, known as the 'HTML Mail Attachment' vulnerability.

Risk Assessment

This vulnerability may lead to unauthorized downloading of malicious attachments, posing a risk of system infection for the user.

Recommendation

It is recommended to update Outlook Express to the latest version or consider using an alternative email client that does not have this vulnerability.

Original NVD description (English source)

Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.