Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an about: or javascript: URI in the href attribute of an a tag.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Outlook | Microsoft | 2002 (including) | 2002 (including) |