CVE-2004-0380

CVE-2004-0380 describes a critical vulnerability in Microsoft Outlook Express 5.5 SP2 through 6 SP1, where the MHTML protocol handler allows remote attackers to bypass domain restrictions. This flaw, with a CVSS score of 10.0, enables arbitrary code execution through crafted CHM files referencing InfoTech Storage protocol handlers. While not in CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.