Hotmail does not properly filter JavaScript code from a users mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specify the javascript: protocol, e.g. jAvascript.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Hotmail | Microsoft | * | * |
References