VulnerabilityModified
CVE-2005-1052
Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
MEDIUM 5.0EPSS 9.38%
Does this matter?
Lower severity and a low EPSS score (9.38%). Track it; it rarely justifies an emergency change on its own.
Description
Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 9.38% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/outlook · microsoft/outlook web access
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.