CVE-2004-1319
N/A
N/A
Summary
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://secunia.com/advisories/13482/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18504
- http://www.us-cert.gov/cas/techalerts/TA05-039A.html
- http://freehost07.websamba.com/greyhats/abusiveparent-discussion.htm
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3851
- http://www.securityfocus.com/bid/11950
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1114
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3464
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-013
- http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4758
- http://www.kb.cert.org/vuls/id/356600
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1701
References
- http://secunia.com/advisories/13482/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18504
- http://www.us-cert.gov/cas/techalerts/TA05-039A.html
- http://freehost07.websamba.com/greyhats/abusiveparent-discussion.htm
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3851
- http://www.securityfocus.com/bid/11950
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1114
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3464
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-013
- http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4758
- http://www.kb.cert.org/vuls/id/356600
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1701
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.