VULHUB ™

An issue has been reported in Microsoft Outlook which could cause a user to unknowingly execute Javascript embedded in an HTML email message. Reportedly, this issue is exploitable if Javascript is embedded in the "about:" or "javascript:" URL of an HREF attribute. Upon the recipient attempting to access the link, embedded Javascript will execute even if scripting is disabled in IE.

An issue has been reported in Microsoft Outlook which could cause a user to unknowingly execute Javascript embedded in an HTML email message. Reportedly, this issue is exploitable if Javascript is embedded in the "about:" or "javascript:" URL of an HREF attribute. Upon the recipient attempting to access the link, embedded Javascript will execute even if scripting is disabled in IE.