CVE-2001-1088
N/A
N/A
Summary
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/archive/1/188752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6655
- http://www.securityfocus.com/bid/2823
- http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241
References
- http://www.securityfocus.com/archive/1/188752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6655
- http://www.securityfocus.com/bid/2823
- http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.