CVE Catalog
CVE-2000-0085
HighExploitation Probability (EPSS)
Very high risk14.94%
96th percentile - higher than 96% of all known CVEs
Summary
Hotmail does not properly filter JavaScript code from a user's mailbox, allowing a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code in the user's context, potentially leading to data theft or account takeover.
Recommendation
Users are advised to avoid clicking on suspicious links, and Hotmail should implement additional JavaScript code filtering mechanisms.
Original NVD description (English source)
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.