CVE-2001-0145: Microsoft Outlook

High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days.

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.

Affected products

• Microsoft Outlook: version 98 only; version 2000 only
• Microsoft Outlook Express: version 5.0 only

Published 2001-05-03. Last modified 2026-06-16.