CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Microsoft. Its EPSS score suggests a 19.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2001-1088
Severity
HIGH
CVSS
7.5
EPSS
19.71%
Microsoft
Original NVD Description
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.