Vulnerabilities > CVE-2000-0085 - Unspecified vulnerability in Microsoft Hotmail
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |