CVE-2004-1319
Medium
Description
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Nortel Ip Softphone
PublishedDec 15, 2004
First seenDec 15, 2004
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel ip_softphone_2050 | No range specified | — |
| nortel mobile_voice_client_2050 | No range specified | — |
| nortel optivity_telephony_manager | No range specified | — |
| microsoft windows_2000 | No range specified | — |
| microsoft windows_2003_server | enterprise, enterprise_64-bit, r2, standard, web | — |
| microsoft windows_98 | No range specified | — |
| microsoft windows_98se | No range specified | — |
| microsoft windows_me | No range specified | — |
| microsoft windows_xp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.