CVE-2000-0621

High

Description

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability.

SeverityHigh

CVSS7.5

Exploit probability—

Product

Microsoft Outlook

PublishedJul 20, 2000

First seenJul 20, 2000

How to fix

Vendor advisories

docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-046

Affected products

Product	Affected versions	Fixed in
microsoft outlook	97, 98, 2000	—
microsoft outlook_express	4.0, 4.01, 5.0, 5.0.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.