CVE-2000-0081

High

Published: 10/01/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

18.77%

97th percentile - higher than 97% of all known CVEs

Summary

Hotmail does not properly filter JavaScript code from a user's mailbox, allowing a remote attacker to execute the code using hexadecimal codes to specify the javascript: protocol.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code in the user's context, potentially leading to data theft or account takeover.

Recommendation

It is recommended to implement additional filters and security measures to protect against the injection of malicious JavaScript code.

Original NVD description (English source)

Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.