CVE-2002-1255: Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email...

Security readout for executives and security teams

CVE-2002-1255 is an Outlook 2002 denial-of-service issue. A specially malformed email header can make Outlook 2002 repeatedly fail when the message is accessed through POP3, IMAP, or WebDAV. The source bundle does not show data theft, code execution, CVSS scoring, or confirmed active exploitation. Exposure is likely limited to environments still using Microsoft Outlook 2002 with POP3, IMAP, or WebDAV mail access. Modern Outlook deployments are not identified as affected in the provided sources. Treat as a legacy-client availability risk. It is unlikely to affect modern estates, but any remaining Outlook 2002 use should be remediated because a single email may disrupt affected users. Mitigation focus: Identify any Outlook 2002 installations and associated mail access protocols.; Review Microsoft MS02-067 for vendor remediation and apply applicable guidance.; Prioritize migration away from Outlook 2002 where it remains in use..

Prepared

Jun 30, 2026, 03:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.