Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an about: or javascript: URI in the href attribute of an a tag.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Outlook |
Microsoft |
2002 |
2002 |
References