CVE-2004-1043
- State
- Published
- Severity
- Not scored
- Published
- Dec 31, 2004
- Updated
- Aug 8, 2024
- Reserved
- Nov 17, 2004
Description
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:1349vdb-entrysignature
- oval:org.mitre.oval:def:1963vdb-entrysignature
- VU#972415third-party-advisory
- ie-helpactivexcontrol-save-file(18311)vdb-entry
- 20041225 Microsoft Internet Explorer SP2 Fully Automated Remote Compromisemailing-list
- oval:org.mitre.oval:def:2830vdb-entrysignature
- MS05-001vendor-advisory
- TA05-012Bthird-party-advisory
- oval:org.mitre.oval:def:3496vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.