Total vulnerabilities in the database
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
| Software | From | Fixed in |
|---|---|---|
| microsoft / outlook | 2000 | 2000.x |
| microsoft / outlook_express | 5.0 | 5.0.x |
| microsoft / outlook_express | 4.72.3612 | 4.72.3612.x |
| microsoft / outlook_express | 4.5 | 4.5.x |
| microsoft / outlook_express | 4.72.3120.0 | 4.72.3120.0.x |
| microsoft / outlook_express | 4.27.3110 | 4.27.3110.x |
| microsoft / outlook_express | 4.72.2106 | 4.72.2106.x |
| microsoft / outlook_express | 4.0 | 4.0.x |
| microsoft / outlook | 98 | 98.x |
| microsoft / outlook_express | 5.5 | 5.5.x |
| microsoft / outlook | 97 | 97.x |