CVE-2002-1056: Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block...

Security readout for executives and security teams

This is an old Microsoft Outlook issue affecting Outlook 2000 and 2002 when Word is used as the email editor. A malicious email could run script when the recipient replies to or forwards it. Business urgency is mainly for organizations with legacy Office deployments. Exposure is limited to legacy Outlook 2000 or 2002 clients using Word as the email editor. Modern environments are unlikely to be exposed unless obsolete Office systems remain in use. Treat this as a legacy-technology risk. It should not drive emergency action unless old Outlook/Office systems still exist, but any confirmed exposure should be prioritized for removal or containment. Mitigation focus: Inventory any remaining Outlook 2000 or 2002 installations.; Check whether Microsoft Word is configured as the email editor.; Review Microsoft MS02-021 for vendor remediation guidance..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.