CVE:CVE-2001-1088
CNNVD:CNNVD-200106-052
带有"Automatically put people I reply to in my address book"选项可用的Microsoft Outlook 8.5版本及之前版本，以及Outlook Express 5版本及之前版本在"Reply-To"地址与"From"地址不同时不通告用户，不可信的远程攻击者可以伪造合法地址并且拦截来自为另一个用户所用的客户端的电子邮件。
solution:Upgrade microsoft outlook to a higher version than 97,98,2000,and avoid the version 97,98,2000; Upgrade microsoft outlook_express to a higher version than 4.0,4.5,4.27.3110,4.72.2106,4.72.3120.0,4.72.3612,5.0,5.5,and avoid the version 4.0,4.5,4.27.3110,4.72.2106,4.72.3120.0,4.72.3612,5.0,5.5