Description
Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses.
References
- owa-email-spoofing(20026) vdb-entry
- 20050408 Microsoft Multiple E-Mail Client Address Spoofing Vulnerability third-party-advisory