NVD

Id
71440  
Name
CVE-2004-1043  
Description
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-1043  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369404 71440 CVE-2004-1043 20041225 Microsoft Internet Explorer SP2 Fully Automated Remote Compromise  View
369405 71440 CVE-2004-1043 oval:org.mitre.oval:def:1349  View
369406 71440 CVE-2004-1043 oval:org.mitre.oval:def:1963  View
369407 71440 CVE-2004-1043 oval:org.mitre.oval:def:2830  View
369408 71440 CVE-2004-1043 oval:org.mitre.oval:def:3496  View
369409 71440 CVE-2004-1043 VU#972415  View
369410 71440 CVE-2004-1043 MS05-001  View
369411 71440 CVE-2004-1043 TA05-012B  View
369412 71440 CVE-2004-1043 ie-helpactivexcontrol-save-file(18311)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63113 JVNDB-2004-000455 Microsoft Windows で HTML Help の ActiveX コントロールにクロスドメインの脆弱性 Mircorsoft Windows に実装される HTML ヘルプ ActiveX コントロール (hhctrl.ocx) には、クロスドメインの脆弱性が存在します。 CVE-2004-1043 9470 CVE-2004-1043 71440 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000455.html 2004-10-19 2007-04-01 View