CVE-2004-2137

First published: Fri Dec 31 2004(Updated: )

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• vendor/microsoft
• product/outlook express
• collector/nvd-index
• agent/severity
• agent/references
• agent/author
• agent/type
• agent/event
• agent/weakness
• agent/softwarecombine
• agent/last-modified-date
• agent/remedy
• agent/description
• agent/first-publish-date
• agent/tags
• collector/mitre-cve
• source/MITRE
• canonical/microsoft outlook express
• version/microsoft outlook express/6.0-sp1
• version/microsoft outlook express/6.0