CVE-2001-1088
HIGH 7.5EPSS 19.7%
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
- CVSS v2.0
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 19.71% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2002-06-25
- Updated
- 2024-08-08