CVE-2004-1319 - CVE House
Back to Database
Status published Medium CVE-2004-1319

The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject...

Vulnerability Description

The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1319

Credits & Attribution

No credits recorded in the NVD database.

References

More from nortel

View All →
CVE-2008-6579
Nortel Communication Server 1000 4.50.x allows remote attackers to obtain...
Medium 5
CVE-2008-6578
Multiple unspecified vulnerabilities in Nortel Communication Server 1000 4.50.x allow...
Critical 10
CVE-2008-6577
Nortel MG1000S, Signaling Server, and Call Server on the Communications...
Critical 10
CVE-2008-6576
Unspecified vulnerability in the "session limitation technique" in the FTP...
High 7.8
CVE-2008-6564
Nortel UNIStim protocol, as used in Communication Server 1000 and...
High 7.6

Affected Vendor

Affected Software

ip softphone 2050, mobile voice client 2050, optivity telephony manager, windows 2000, windows 2003 server, windows 98, windows 98se, windows me, windows xp
Vulnerable Versions:
enterprise, enterprise_64-bit, r2, standard, web

Timeline

Official Publish: January 6th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.