CVE-2004-1319
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
30Vexday Risk Score
Prioriza la corrección. Ella explotación observada en la práctica.
ssvc Attendepss 27%
de la publicación al arma
Publicada en NVD6 ene
Explotación observada+33d
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
Productos afectados
n/a · n/aReferencias
http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.htmlhttp://freehost07.websamba.com/greyhats/abusiveparent-discussion.htmhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-013http://secunia.com/advisories/13482/https://exchange.xforce.ibmcloud.com/vulnerabilities/18504https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1114https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1701https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3464https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3851https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4758http://www.kb.cert.org/vuls/id/356600http://www.securityfocus.com/bid/11950