CVE Catalog

CVE-2000-0524

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
14.63%

96th percentile - higher than 96% of all known CVEs

Summary

Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.

Risk Assessment

Attackers can disrupt the functionality of email applications, potentially leading to a loss of availability of communication services within the organization.

Recommendation

It is recommended to update the software to the latest version and implement email filters that can detect and block messages with blank fields.

Original NVD description (English source)

Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS