CVE-2005-1052: Microsoft Outlook 2003 and Outlook Web Access (OWA) 2003 do not properly display comma separated addresses...

Security readout for executives and security teams

This old issue concerns Outlook 2003 and Outlook Web Access 2003 showing comma-separated From addresses incorrectly. A remote sender could make an email appear to come from someone else. The primary business risk is deception: phishing, fraudulent approvals, or trust abuse in organizations still using these legacy clients. Exposure is likely limited to organizations still using Outlook 2003 or Outlook Web Access 2003, or reviewing old mail through those clients. Modern environments may have no practical exposure, but legacy mail access should be checked. Prioritize this if any legacy Outlook 2003 or OWA 2003 access remains. The issue is old and not KEV-listed, but sender spoofing can support fraud and phishing in environments that still depend on these clients. Mitigation focus: Inventory and retire any Outlook 2003 or OWA 2003 usage.; Check Microsoft or vendor guidance for historical updates and migration advice.; Move users to supported mail clients and supported webmail platforms..

Prepared

Jun 29, 2026, 22:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.