Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Outlook | Microsoft | 2003 (including) | 2003 (including) |
| Outlook_web_access | Microsoft | 2003 (including) | 2003 (including) |