NVD

Id
71699  
Name
CVE-2004-1319  
Description
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2004-12-15  
Modified Date
2017-07-10  
Seq
2004-1319  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
370732 71699 CVE-2004-1319 20041215 MSIE DHTML Edit Control Cross Site Scripting Vulnerability  View
370733 71699 CVE-2004-1319 oval:org.mitre.oval:def:1114  View
370734 71699 CVE-2004-1319 oval:org.mitre.oval:def:1701  View
370735 71699 CVE-2004-1319 oval:org.mitre.oval:def:3464  View
370736 71699 CVE-2004-1319 oval:org.mitre.oval:def:3851  View
370737 71699 CVE-2004-1319 oval:org.mitre.oval:def:4758  View
370738 71699 CVE-2004-1319 VU#356600  View
370739 71699 CVE-2004-1319 MS05-013  View
370740 71699 CVE-2004-1319 11950  View
370741 71699 CVE-2004-1319 TA05-039A  View
370742 71699 CVE-2004-1319 ie-dhtml-xss(18504)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63213 JVNDB-2004-000555 Microsoft Internet Explorer の dhtmled.ocx におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer には、DHTML Edit ActiveX コントロール dhtmled.ocx の execScript() 関数の処理に不備が存在するため、意図的に作成されたリンクをクリックした場合にクロスサイトスクリプティングの脆弱性が存在します。 CVE-2004-1319 9746 CVE-2004-1319 71699 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000555.html 2004-12-15 2007-04-01 View