NVD

Id
78523  
Name
CVE-2001-1088  
Description
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-06-05  
Modified Date
2008-09-05  
Seq
2001-1088  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
392564 78523 CVE-2001-1088 http://support.microsoft.com/default.aspx?scid=kb;EN-US;q234241  View
392565 78523 CVE-2001-1088 20010605 SECURITY.NNOV: Outlook Express address book spoofing  View
392566 78523 CVE-2001-1088 2823  View
392567 78523 CVE-2001-1088 outlook-address-book-spoofing(6655)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64107 JVNDB-2001-000081 Microsoft Outlook Express の複数の機能におけるアドレス帳改ざんの脆弱性 Microsoft Outlook Express において、返信機能、または返信する際にアドレス帳へ自動的に登録される機能を利用された場合に、アドレス帳が改ざんされる脆弱性が存在します。 CVE-2001-1088 3892 CVE-2001-1088 78523 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000081.html 2001-06-02 2007-04-01 View