CVE-2002-1056

CVE-2002-1056 describes a vulnerability in Microsoft Outlook 2000 and 2002 when configured to use Microsoft Word as the email editor. This flaw allows remote attackers to execute arbitrary scripts by sending an email containing malicious HTML or Rich Text Format (RTF) content, which triggers upon the user forwarding or replying to the message. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, though it has garnered significant community discussion with 10 mentions.