A Dutch programmer found out in the weekend that MSN has a security problem. Microsoft was just recovering after the Korea incident, when Alex de Vries found out that one of the MSN sites has a cross-site scripting vulnerability.


This vulnerability is actually a Web design error and not a browser one. Microsoft has rated the problem as extremely critical, the first measure taken being the closing of ILoveMessenger.

Why such a radical action? Well, because Microsoft has figured out that this flaw can be exploited to get cookies from Hotmail users and subsequently gain access to their accounts.

The site in question is http://ilovemessenger.msn.com/.

All these details have been made public by MSN officials only a few hours after MSN Korea was attacked by those who wanted Lineage gaming accounts.