CVE-2005-1052: Medium severity Microsoft Outlook Web Access vulnerability

Published Apr 12, 2005

Updated

Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.

Affected Software

2 affected components

Microsoft Outlook Web Access=2003

Microsoft Outlook=2003

Event History

Apr 12, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1052?

CVE-2005-1052 is classified as a medium severity vulnerability.

How do I fix CVE-2005-1052?

To fix CVE-2005-1052, it is recommended to apply the latest security updates provided by Microsoft for Outlook 2003 and Outlook Web Access.

What types of software are affected by CVE-2005-1052?

CVE-2005-1052 affects Microsoft Outlook 2003 and Microsoft Outlook Web Access 2003.

What is the risk associated with CVE-2005-1052?

The risk associated with CVE-2005-1052 is that remote attackers could spoof email addresses, potentially leading to phishing attacks.

Can CVE-2005-1052 be exploited remotely?

Yes, CVE-2005-1052 can be exploited remotely due to the vulnerability in how email addresses are displayed in the From field.