CVE-2000-0085
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 15%
exploitation probability
15%top 3% of all CVEs
observed exploitation
nono source reports it
Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in the IMG tag.
Affected products
n/a · n/a