CVE-2001-1088

Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.

• microsoft outlook 97 • microsoft outlook 98 • microsoft outlook 2000 • microsoft outlook express 4.0 • microsoft outlook express 4.5 • microsoft outlook express 4.27.3110 • microsoft outlook express 4.72.2106 • microsoft outlook express 4.72.3120.0 • microsoft outlook express 4.72.3612 • microsoft outlook express 5.0 • microsoft outlook express 5.5