CVE-2004-0503
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and...
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
- Record
CVE-2004-0503- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
- Record
CVE-2004-0503- Updated
- 2026-11-02
EUVDEUVD-2004-0502 No score
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
- Record
EUVD-2004-0502- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rrv4-32hc-7xx2 No score
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and...
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
- Record
GHSA-rrv4-32hc-7xx2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0503 is a medium vulnerability (CVSS 5.0) in Microsoft Outlook, published June 3, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. No source names a fixed version.
References
marc.info?l=bugtraq&m=108483193328605&w=2
osvdb.org/6217
archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.html
exchange.xforce.ibmcloud.com/vulnerabilities/16173
secunia.com/advisories/11629
securityfocus.com/bid/10369
nvd.nist.gov/vuln/detail/CVE-2004-0503
github.com/advisories/GHSA-rrv4-32hc-7xx2