CVE-2002-2100: Microsoft Outlook

Medium severity, CVSS 5.0. EPSS: 11.4% chance of exploitation in the next 30 days.

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.

Affected products

• Microsoft Outlook: version 2000 only; version 2002 only

Published 2002-12-31. Last modified 2026-06-16.