PT-2000-1074 · Microsoft · Hotmail

CVE-2000-0085

·

Publicado

2000-01-04

·

Atualizado

2022-08-17

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Hotmail (affected versions not specified)
Description The issue arises from improper filtering of JavaScript code in a user's mailbox, allowing a remote attacker to execute code. This can be achieved via the LOWSRC or DYNRC parameters in the IMG tag.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2000-0085

Produtos afetados

Hotmail