CVE-2001-0145

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-01465.0IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a seCVE-2001-014710.0Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperlyCVE-2001-01487.5The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a vaCVE-2001-01495.0Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript funCVE-2001-01505.1Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could alloCVE-2001-01515.0IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.CVE-2001-01522.1The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a fiCVE-2001-01537.5Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitraCVE-2001-01547.5HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attCVE-2001-01557.5Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name thCVE-2001-01562.1VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitraCVE-2001-01574.6Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access
CVE-2001-0145: High severity, CVSS 7.5 | Vulnix