CVE-2003-0007 in Outlook

Summary

Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 02/07/2003
• Moderation: VulDB entry created
• Entries: 1: VDB-20109
• CPE: ready
• CWE: CWE-311 (Confirmed)
• CVSS: 5.3
• EPSS: 0.04999
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2003-0007
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2003-0007
• CVE Details: https://www.cvedetails.com/cve/CVE-2003-0007/