CVE

Id
9471  
CVE No.
CVE-2004-1043  
Status
Candidate  
Description
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."  
Phase
Assigned (20041117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63650 9471 CVE-2004-1043 BUGTRAQ:20041225 Microsoft Internet Explorer SP2 Fully Automated Remote Compromise  View
63651 9471 CVE-2004-1043 URL:http://archives.neohapsis.com/archives/bugtraq/2004-12/0426.html  View
63652 9471 CVE-2004-1043 MS:MS05-001  View
63653 9471 CVE-2004-1043 URL:http://www.microsoft.com/technet/security/bulletin/ms05-001.mspx  View
63654 9471 CVE-2004-1043 CERT:TA05-012B  View
63655 9471 CVE-2004-1043 URL:http://www.us-cert.gov/cas/techalerts/TA05-012B.html  View
63656 9471 CVE-2004-1043 CERT-VN:VU#972415  View
63657 9471 CVE-2004-1043 URL:http://www.kb.cert.org/vuls/id/972415  View
63658 9471 CVE-2004-1043 OVAL:oval:org.mitre.oval:def:1349  View
63659 9471 CVE-2004-1043 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1349  View
63660 9471 CVE-2004-1043 OVAL:oval:org.mitre.oval:def:1963  View
63661 9471 CVE-2004-1043 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1963  View
63662 9471 CVE-2004-1043 OVAL:oval:org.mitre.oval:def:2830  View
63663 9471 CVE-2004-1043 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2830  View
63664 9471 CVE-2004-1043 OVAL:oval:org.mitre.oval:def:3496  View
63665 9471 CVE-2004-1043 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3496  View
63666 9471 CVE-2004-1043 XF:ie-helpactivexcontrol-save-file(18311)  View

Related JVN