CVE-2004-1319
No fix known EPSS 27%
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
Products: nortel ip_softphone_2050, nortel mobile_voice_client_2050, nortel optivity_telephony_manager, microsoft windows_2000, microsoft windows_2003_server, microsoft windows_98, microsoft windows_98se, microsoft windows_me, microsoft windows_xp