Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0653. PoCs published by Georgi Guninski.
AI-analyzed exploit summary This exploit leverages a vulnerability in Microsoft Outlook Express 5 where HTML parsing allows execution of Active Scripting. The provided JavaScript code opens a new window and uses the 'about:' protocol to execute arbitrary script, demonstrating the ability to read the content of new email messages.
Description
Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability.
Exploits (1)
This exploit leverages a vulnerability in Microsoft Outlook Express 5 where HTML parsing allows execution of Active Scripting. The provided JavaScript code opens a new window and uses the 'about:' protocol to execute arbitrary script, demonstrating the ability to read the content of new email messages.