Vulnerability · NVD
CVE-2001-1088
CVE-2001-1088, Severity pending severity (CVSS —): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- -
- Exploitation
- -
- Tracked apps
- 2
- Still exposed
- 0
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
-
Affected - Fixed in - Latest tracked - undetermined
Vulnerable CPE configurations (6)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:* |
| microsoft |
outlook All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:* |