CVE-2004-0501

CVE-2004-0501 describes a vulnerability in Microsoft Outlook 2003 where specially crafted HTML emails containing VML entities can force Outlook to request external URLs. This allows remote attackers to confirm email address validity, detect when messages are read, and potentially leak other information, bypassing intended access restrictions. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N) and a FAUCET Risk Score of 97/100, it indicates a moderate to high risk due to its network-based, low-complexity attack vector. While not listed on KEV or Hot Lists, an ExploitDB entry exists for email address verification, though there is no evidence of active exploitation, Metasploit/Nuclei modules, or significant community discussion or media coverage.