CVE-2004-0121: Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailt...

Security readout for executives and security teams

CVE-2004-0121 affects Microsoft Outlook 2002 handling of mailto links. A malicious link could pass unsafe arguments to OUTLOOK.EXE, potentially allowing code to run from a trusted local context. This is mainly urgent for organizations still running legacy Office 2002 systems. Exposure is likely limited to endpoints where Microsoft Outlook 2002 remains installed or registered as the mailto handler. The bundle does not identify broader affected products or CPEs. Treat this as a legacy-system risk. It is high impact if Outlook 2002 remains deployed, but modern environments without that product are unlikely to be exposed based on the provided evidence. Mitigation focus: Review and apply Microsoft MS04-009 guidance for affected Outlook 2002 systems.; Retire or upgrade Outlook 2002 where it remains in use.; Prioritize controls for endpoints handling untrusted email or web links..

Prepared

Jun 30, 2026, 03:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.