{"cvss":0.0,"datePublished":"2004-02-13T00:00:00Z","dateUpdated":"2004-02-13T00:00:00Z","description":"The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the \"MHTML URL Processing Vulnerability.\"","dueDate":"","id":"CVE-2004-0380","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"outlook_express","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Microsoft Outlook Express MHTML URL Processing Vulnerability","vendor":"Microsoft"}