CVE-2000-0081

Published: 2000-01-10

Description

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.

Severity

Overall Severity: N/A

CVSS Metrics

Type Score Severity Vector

Affected Products

microsoft - hotmail

Affected Versions:

References

Neural Processor Active