CVE-2004-1319
30Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Attendepss 27%
de la publicación al arma
Publicada en NVD6 ene
VulnCheck+33d
probabilidad de explotación
27%top 2% de las CVE
explotación observada
síVulnCheck
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
Productos afectados
n/a · n/aReferencias
http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.htmlhttp://freehost07.websamba.com/greyhats/abusiveparent-discussion.htmhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-013http://secunia.com/advisories/13482/https://exchange.xforce.ibmcloud.com/vulnerabilities/18504https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1114https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1701https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3464https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3851https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4758http://www.kb.cert.org/vuls/id/356600http://www.securityfocus.com/bid/11950