CVE-2001-1088
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 20%
from disclosure to weapon0 days
Published on NVDJun 25
1st PoCJun 5
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/20899⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.