Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exchange_server | Microsoft | * | * |
| Outlook | Microsoft | * | * |
| Windows_messaging | Microsoft | * | * |