CVE-2004-0526

medium · 5

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

CVSS

17.2%

EPSS (exploit prob.)

97th

EPSS percentile

2004-08-06

Published

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

Vendor	Product	Affected versions
microsoft	ie	6.0
microsoft	internet_explorer	5.0
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.5
microsoft	internet_explorer	5.5
microsoft	internet_explorer	5.5
microsoft	internet_explorer	6.0
microsoft	outlook	97
microsoft	outlook	98
microsoft	outlook	2000
microsoft	outlook	2000
microsoft	outlook	2000
microsoft	outlook	2000
microsoft	outlook	2002
microsoft	outlook	2002
microsoft	outlook	2002
microsoft	outlook	2002
microsoft	outlook	2003
microsoft	outlook_express	4.0
microsoft	outlook_express	4.01
microsoft	outlook_express	4.27.3110
microsoft	outlook_express	4.72.2106
microsoft	outlook_express	4.72.3120.0
microsoft	outlook_express	4.72.3612
microsoft	outlook_express	5.0
microsoft	outlook_express	5.0.1
microsoft	outlook_express	5.5
microsoft	outlook_express	6.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0526