CVE-2004-0526

Published: Aug 6, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

Affected (32)

Products: Microsoft: Ie, Internet Explorer, Outlook, Outlook Express

4 products

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 6.0 sp1
Microsoft Internet Explorer	Version 5.0.1
Microsoft Internet Explorer	Version 5.0.1 sp1
Microsoft Internet Explorer	Version 5.0.1 sp2
Microsoft Internet Explorer	Version 5.0.1 sp3
Microsoft Internet Explorer	Version 5.0.1 sp4
Microsoft Internet Explorer	Version 5.0
Microsoft Internet Explorer	Version 5.5
Microsoft Internet Explorer	Version 5.5 sp1
Microsoft Internet Explorer	Version 5.5 sp2
Microsoft Internet Explorer	Version 6.0
Microsoft Outlook	Version 2000
Microsoft Outlook	Version 2000 sp2
Microsoft Outlook	Version 2000 sp3
Microsoft Outlook	Version 2000 sr1
Microsoft Outlook	Version 2002
Microsoft Outlook	Version 2002 sp1
Microsoft Outlook	Version 2002 sp2
Microsoft Outlook	Version 2002 sp3
Microsoft Outlook	Version 2003
Microsoft Outlook	Version 97
Microsoft Outlook	Version 98
Microsoft Outlook Express	Version 4.01 sp2
Microsoft Outlook Express	Version 4.0
Microsoft Outlook Express	Version 4.27.3110
Microsoft Outlook Express	Version 4.72.2106
Microsoft Outlook Express	Version 4.72.3120.0
Microsoft Outlook Express	Version 4.72.3612
Microsoft Outlook Express	Version 5.0.1
Microsoft Outlook Express	Version 5.0
Microsoft Outlook Express	Version 5.5
Microsoft Outlook Express	Version 6.0