CVE-2000-0105

published 2000-02-01

CVE-2000-0105: Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references…

Priority P4 19 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

EXPLOIT

Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	outlook_express	—	—

Detection & IOCs extracted from sources · hover to see the quote

command a=window.open("about:Click here to see the active message"); a.x=window.document;↗

• → Detect Active Scripting (JavaScript) embedded in HTML email messages that opens 'about:' scheme windows and accesses window.document to read email content — characteristic of this CVE-2000-0105 exploit pattern. ↗
• → Flag HTML email messages containing script that references 'about:' URIs combined with window.document property access, as this is the mechanism used to access subsequent email messages from the victim's inbox. ↗
• → Monitor Outlook Express 5.01 and Internet Explorer 5.01 clients for script execution within email context that accesses variables referencing subsequent email messages read by the client. ↗

• · The exploit may affect other HTML-parsing email clients beyond Outlook Express 5, broadening the potential attack surface beyond the named products. ↗
• · The malicious script reads messages that arrive *after* the hostile code has been executed, meaning the attacker gains access to future incoming mail rather than the existing inbox at time of delivery. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.