CVE-2001-0538
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote...
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
- Record
CVE-2001-0538- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
- Record
CVE-2001-0538- Updated
- 2026-11-02
EUVDEUVD-2001-0530 No score
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
- Record
EUVD-2001-0530- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xxqr-h45r-xgm7 No score
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote...
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
- Record
GHSA-xxqr-h45r-xgm7- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Outlook 98/2000/2002 - Unauthorized Email Access | 2001-07-12 |
| Exploit-DB | Microsoft Outlook 98/2000/2002 - Arbitrary Code Execution | 2001-07-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-0538 is a high vulnerability (CVSS 10.0) in Microsoft Outlook, published August 14, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 52.9%, the 98th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=99496431214078&w=2
securityfocus.com/bid/3025
docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-038
exchange.xforce.ibmcloud.com/vulnerabilities/6831
ciac.org/ciac/bulletins/l-113.shtml
kb.cert.org/vuls/id/131569
ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=862
nvd.nist.gov/vuln/detail/CVE-2001-0538
github.com/advisories/GHSA-xxqr-h45r-xgm7