CVE-2004-2137

Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information.

• http://secunia.com/advisories/12376Patch, Vendor Advisory
• http://securitytracker.com/id?1011067Patch
• http://support.microsoft.com/kb/843555Patch, Vendor Advisory
• http://www.networksecurity.fi/advisories/outlook-bcc.htmlPatch, Vendor Advisory
• http://www.osvdb.org/9167
• http://www.securityfocus.com/bid/11040
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17098
• http://secunia.com/advisories/12376Patch, Vendor Advisory
• http://securitytracker.com/id?1011067Patch
• http://support.microsoft.com/kb/843555Patch, Vendor Advisory
• http://www.networksecurity.fi/advisories/outlook-bcc.htmlPatch, Vendor Advisory
• http://www.osvdb.org/9167
• http://www.securityfocus.com/bid/11040
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17098

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2131Stack-based buffer overflow in ontape for IBM Informix Dynam…
• CVE-2004-2132Directory traversal vulnerability in PJreview_Neo.cgi in PJ …
• CVE-2004-2133Certain third-party packages for CVSup 16.1h, such as SuSE L…
• CVE-2004-2134Oracle toplink mapping workBench uses a weak encryption algo…
• CVE-2004-2135cryptoloop on Linux kernel 2.6.x, when used on certain file …
• CVE-2004-2136dm-crypt on Linux kernel 2.6.x, when used on certain file sy…
• CVE-2004-2138Cross-site scripting (XSS) vulnerability in AWSguest.php in …
• CVE-2004-2139Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3…
• CVE-2004-2140CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 all…
• CVE-2004-2141Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-2142Unknown vulnerability in the remote tape support (remote.c) …
• CVE-2004-2143SQL injection vulnerability in the ReMOSitory Server add-on …