[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fq6Qvb7LWb41Q8IB7HwBmv93Qff5zejsj7G-Aa6oWlVg":3,"g5a-risk:CVE-2004-0380":188},{"success":4,"data":5,"meta":186},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":28,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":44,"references":45,"referencesCount":128,"weaknesses":129,"weaknessesCount":133,"isActivelyExploited":30,"cisaInfo":28,"otxData":28,"relatedBlogPosts":134,"seoMetadata":135,"configurations":160,"relatedVendorCves":170,"notableEvents":171},"CVE-2004-0380","What is CVE-2004-0380?","The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the \"MHTML URL Processing Vulnerability.\"","The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execu...","2004-05-04T04:00:00","2026-06-16T22:05:31.463",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":31},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":30,"ObtainAllPrivilege":4,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",false,[],0.6325,[32,32,32,32,32,32,32],"Critical",[36,41],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"microsoft","outlook_express","5.5","cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":42,"criteria":43,"vulnerable":4},"6.0","cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*",2,[46,50,54,59,65,69,72,75,79,83,87,91,94,97,100,102,104,106,108,110,112,114,116,118,120,122,124,126],{"url":47,"source":48,"tags":49},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F10523","Secunia",[],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.k-otik.net\u002Fbugtraq\u002F02.18.InternetExplorer.php","K-otik",[],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F323070","Cert",[58],"US Government Resource",{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F354447","Securityfocus",[63,64],"Patch","Vendor Advisory",{"url":66,"source":61,"tags":67},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F358913",[68,63,64],"Exploit",{"url":70,"source":61,"tags":71},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F9105",[],{"url":73,"source":61,"tags":74},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F9658",[],{"url":76,"source":77,"tags":78},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA04-104A.html","Us-cert",[58],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2004\u002Fms04-013","Microsoft",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F15705","Ibmcloud",[],{"url":88,"source":89,"tags":90},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A1010","Cisecurity",[],{"url":92,"source":89,"tags":93},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A1028",[],{"url":95,"source":89,"tags":96},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A882",[],{"url":98,"source":89,"tags":99},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A990",[],{"url":47,"source":48,"tags":101},[],{"url":51,"source":52,"tags":103},[],{"url":55,"source":56,"tags":105},[58],{"url":60,"source":61,"tags":107},[63,64],{"url":66,"source":61,"tags":109},[68,63,64],{"url":70,"source":61,"tags":111},[],{"url":73,"source":61,"tags":113},[],{"url":76,"source":77,"tags":115},[58],{"url":80,"source":81,"tags":117},[],{"url":84,"source":85,"tags":119},[],{"url":88,"source":89,"tags":121},[],{"url":92,"source":89,"tags":123},[],{"url":95,"source":89,"tags":125},[],{"url":98,"source":89,"tags":127},[],28,[130],{"id":131,"name":131,"description":132},"Unknown","NVD-CWE-Other",1,[],{"title":136,"metaDescription":137,"keywords":138,"canonicalUrl":139,"structuredData":140},"What is CVE-2004-0380? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2004-0380, a critical severity cyber security vulnerability from 2004. High exploit probability (63.2%). The MHTML protocol han...","CVE-2004-0380, CVE-2004-0380 vulnerability, CVE-2004-0380 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2004, CVSS score, exploit, patch, remediation, microsoft security, outlook_express vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2004-0380",{"@context":141,"@type":142,"headline":136,"description":137,"datePublished":10,"dateModified":11,"author":143,"publisher":147,"about":151,"mainEntityOfPage":155,"articleSection":158,"keywords":159},"https:\u002F\u002Fschema.org","TechArticle",{"@type":144,"name":145,"url":146},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":144,"name":145,"url":146,"logo":148},{"@type":149,"url":150},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":152,"name":6,"description":153,"additionalType":154},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":156,"@id":157},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2004-0380","Cybersecurity","CVE-2004-0380, CVE-2004-0380 vulnerability, CVE-2004-0380 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[161],{"Operator":28,"Negate":28,"Nodes":162},[163],{"Operator":164,"Negate":30,"CPEMatch":165},"OR",[166,168],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":167,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":169,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"85FD3557-956D-4A96-8AA5-5FD9DB87FD11",[],[172,179],{"id":173,"eventType":174,"eventTime":175,"details":176,"label":177,"color":178},"4ec014d1-2018-4db6-843c-2465d0ac9d78","HIGH_EPSS_DELTA","2023-03-07T00:00:00+00:00","EPSS score changed from 0.639760 to 0.964520 (delta: +0.324760)","EPSS Score Increased","red",{"id":180,"eventType":181,"eventTime":182,"details":183,"label":184,"color":185},"d5f9729c-4930-48c0-885c-06627797116b","LOW_EPSS_DELTA","2023-10-13T00:00:00+00:00","EPSS score changed from 0.966250 to 0.965930 (delta: -0.000320)","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":187,"version":22},1792262093540,{"score":189,"band":190,"action":191,"scoredAt":192},61,"Medium","Plan remediation","2026-10-17T06:32:31.155203+00:00"]