03.09.2004 - MS04-009: Vulnerability in Microsoft Outlook Could Allow Code Execution (828040)

A security vulnerability exists within Outlook 2002 that could allow Internet Explorer to execute script code in the Local Machine zone on an affected system. The parsing of specially crafted mailto URLs by Outlook 2002 causes this vulnerability. To exploit this vulnerability, an attacker would have to host a malicious Web site that contained a Web page designed to exploit the vulnerability and then persuade a user to view the Web page. - Download Office XP SP3 Update Client Only - Download Office XP SP3 Update Full Update - Download Windows Server 2003 - Download Office XP Office SP-2 Update - View Microsoft Security Bulletin MS04-009 - View Microsoft Knowledge Base Article - 828040 - Visit Microsoft Corporation