Description
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
References
- 13482 third-party-advisory
- ie-dhtml-xss(18504) vdb-entry
- TA05-039A third-party-advisory
- http://freehost07.websamba.com/greyhats/abusiveparent-discussion.htm
- oval:org.mitre.oval:def:3851 vdb-entry signature
- 11950 vdb-entry
- oval:org.mitre.oval:def:1114 vdb-entry signature
- oval:org.mitre.oval:def:3464 vdb-entry signature
- MS05-013 vendor-advisory
- 20041215 MSIE DHTML Edit Control Cross Site Scripting Vulnerability mailing-list
- oval:org.mitre.oval:def:4758 vdb-entry signature
- VU#356600 third-party-advisory
- oval:org.mitre.oval:def:1701 vdb-entry signature