CVE

Id
8977  
CVE No.
CVE-2004-0549  
Status
Candidate  
Description
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.  
Phase
Assigned (20040611)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
57733 8977 CVE-2004-0549 FULLDISC:20040602 180 Solutions Exploits and Toolbars Hacking Patched Users(I.E Exploits)  View
57734 8977 CVE-2004-0549 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0031.html  View
57735 8977 CVE-2004-0549 FULLDISC:20040606 Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan)  View
57736 8977 CVE-2004-0549 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0104.html  View
57737 8977 CVE-2004-0549 BUGTRAQ:20040621 IE/0DAY -> Insider Prototype  View
57738 8977 CVE-2004-0549 URL:http://marc.info/?l=bugtraq&m=108786396622284&w=2  View
57739 8977 CVE-2004-0549 BUGTRAQ:20040628 JS.Scob.Trojan Source Code ...  View
57740 8977 CVE-2004-0549 URL:http://marc.info/?l=bugtraq&m=108852642021426&w=2  View
57741 8977 CVE-2004-0549 MISC:http://62.131.86.111/analysis.htm  View
57742 8977 CVE-2004-0549 MISC:http://umbrella.name/originalvuln/msie/InsiderPrototype/  View
57743 8977 CVE-2004-0549 MS:MS04-025  View
57744 8977 CVE-2004-0549 URL:http://www.microsoft.com/technet/security/bulletin/ms04-025.mspx  View
57745 8977 CVE-2004-0549 CERT:TA04-163A  View
57746 8977 CVE-2004-0549 URL:http://www.us-cert.gov/cas/techalerts/TA04-163A.html  View
57747 8977 CVE-2004-0549 CERT:TA04-184A  View
57748 8977 CVE-2004-0549 URL:http://www.us-cert.gov/cas/techalerts/TA04-184A.html  View
57749 8977 CVE-2004-0549 CERT:TA04-212A  View
57750 8977 CVE-2004-0549 URL:http://www.us-cert.gov/cas/techalerts/TA04-212A.html  View
57751 8977 CVE-2004-0549 CERT-VN:VU#713878  View
57752 8977 CVE-2004-0549 URL:http://www.kb.cert.org/vuls/id/713878  View
57753 8977 CVE-2004-0549 XF:ie-location-restriction-bypass(16348)  View
57754 8977 CVE-2004-0549 URL:http://xforce.iss.net/xforce/xfdb/16348  View
57755 8977 CVE-2004-0549 OVAL:oval:org.mitre.oval:def:1133  View
57756 8977 CVE-2004-0549 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1133  View
57757 8977 CVE-2004-0549 OVAL:oval:org.mitre.oval:def:207  View
57758 8977 CVE-2004-0549 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:207  View
57759 8977 CVE-2004-0549 OVAL:oval:org.mitre.oval:def:241  View
57760 8977 CVE-2004-0549 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:241  View
57761 8977 CVE-2004-0549 OVAL:oval:org.mitre.oval:def:519  View

Related JVN