CVE-2004-0215

CVE-2004-0215 describes a denial-of-service vulnerability affecting Microsoft Outlook Express versions 5.5 and 6, as well as several Avaya products that integrate Outlook Express. An attacker can exploit this by sending a specially crafted email with a malformed header, causing the application to crash. This vulnerability carries a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, leading to a denial of service. While the EPSS score suggests a higher-than-average likelihood of exploitation, there is no known public exploit code available in Metasploit or ExploitDB, and it is not listed in CISA's KEV catalog. Despite its age, the vulnerability still garners significant community discussion.