CVE-2004-0215
UnknownEPSS 15.63%
Last modified
CVE-2004-0215 is a vulnerability of currently unknown severity. Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.. EPSS estimates a 15.63% chance of exploitation in the next 30 days.
Description
Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Avaya | Ip600 Media Servers | All versions |
| Microsoft | Outlook Express | 6.0 |
| Avaya | Definity One Media Server | All versions |
| Avaya | S8100 | All versions |
| Avaya | Modular Messaging Message Storage Server | s3400 |
References
- http://www.kb.cert.org/vuls/id/869640Patch, Third Party Advisory, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlPatch, Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/869640Patch, Third Party Advisory, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlPatch, Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-0215?
Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
How severe is CVE-2004-0215?
Severity scoring for CVE-2004-0215 is pending analysis. The EPSS model estimates a 15.63% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0215?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-0209Unknown vulnerability in the Graphics Rendering Engine proce…
- CVE-2004-0210The POSIX component of Microsoft Windows NT and Windows 2000…7.8
- CVE-2004-0211The kernel for Microsoft Windows Server 2003 does not reset …
- CVE-2004-0212Stack-based buffer overflow in the Task Scheduler for Window…
- CVE-2004-0213Utility Manager in Windows 2000 launches winhlp32.exe while …7.8
- CVE-2004-0214Buffer overflow in Microsoft Internet Explorer and Explorer …
- CVE-2004-0216Integer overflow in the Install Engine (inseng.dll) for Inte…
- CVE-2004-0217The LiveUpdate capability (liveupdate.sh) in Symantec AntiVi…7
- CVE-2004-0218isakmpd in OpenBSD 3.4 and earlier allows remote attackers t…
- CVE-2004-0219isakmpd in OpenBSD 3.4 and earlier allows remote attackers t…
- CVE-2004-0220isakmpd in OpenBSD 3.4 and earlier allows remote attackers t…
- CVE-2004-0221isakmpd in OpenBSD 3.4 and earlier allows remote attackers t…
Are you affected by CVE-2004-0215?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST