Internet Explorer DHTML Edit ActiveX Control Cross-Site Scripting - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0) - NEW -

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Internet Explorer DHTML Edit ActiveX Control Cross-Site Scripting

Secunia Advisory:	SA13482
Release Date:	2004-12-16
Last Update:	2005-11-21

Critical:	Highly critical
Impact:	Cross Site Scripting System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Microsoft Internet Explorer 6.x

CVE reference:	CVE-2004-1319 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Paul has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system. The vulnerability is caused due to an error in the DHTML Edit ActiveX control when handling the "execScript()" function in certain situations. This can be exploited to execute arbitrary script code in a user's browser session in context of an arbitrary site. Secunia has constructed a test, which can be used to check if your browser is affected by this issue: http://secunia.com/internet_explorer_cross-site_scripting_vulnerability_test/ This can further be exploited to execute arbitrary code by running malicious code in the "Local Machine" zone. The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP1/SP2. Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector. Solution: Microsoft has released updates. Microsoft Windows 2000 (requires Service Pack 3 or Service Pack 4): http://www.microsoft.com/downloads/de...=AEA07CBA-0E2B-4A22-91ED-1D23BB012C04 Microsoft Windows XP (requires Service Pack 1 or Service Pack 2): http://www.microsoft.com/downloads/de...=9490E7D2-03C2-463A-B3D0-B949F5295208 Microsoft Windows XP 64-Bit Edition (requires Service Pack 1) (Itanium): http://www.microsoft.com/downloads/de...=9E0247B8-240E-416C-9586-ACD5EF8578DE Microsoft Windows XP 64-Bit Edition Version 2003 (Itanium): http://www.microsoft.com/downloads/de...=2CE98263-2AB4-4FE3-8B0B-5B3155119730 Microsoft Windows XP Embedded (with SP2): http://www.microsoft.com/downloads/de...=f1a43063-349b-4352-847f-947bd263f5fd Microsoft Windows XP Embedded (with SP1): http://www.microsoft.com/downloads/de...=3b389bea-6617-4daf-a4c7-62f23097961c Microsoft Windows Server 2003: http://www.microsoft.com/downloads/de...=E99F5BDD-8EA8-4837-960E-0D20DEA9AC4D Microsoft Windows Server 2003 (Itanium): http://www.microsoft.com/downloads/de...=2CE98263-2AB4-4FE3-8B0B-5B3155119730 Provided and/or discovered by: Initially discovered by Liu Die Yu Further research and PoC by Paul (from greyhats) Changelog: 2004-12-20: Updated credits and solution. 2005-01-06: Added link to US-CERT vulnerability note. Added CVE reference. 2005-02-08: Microsoft released patches. Updated "Solution" and "Description" section. 2005-11-21: Added patch information for Windows XP Embedded. Original Advisory: MS05-013 (KB891781): http://www.microsoft.com/technet/security/bulletin/ms05-013.mspx Other References: US-CERT VU#356600: http://www.kb.cert.org/vuls/id/356600



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

127 Related Secunia Security Advisories, displaying 10

1. Internet Explorer FTP Command Injection Vulnerability

2. Microsoft Internet Explorer Multiple Vulnerabilities

3. Internet Explorer Multiple Code Execution Vulnerabilities

4. Microsoft Web Proxy Auto-Discovery Feature Security Issue

5. Internet Explorer Data Stream Handling Vulnerability

6. Internet Explorer Unspecified Address Bar Spoofing Vulnerability

7. Internet Explorer "OnKeyDown" Event Focus Weakness

8. Microsoft Internet Explorer FTP Credentials Exposure

9. Microsoft Internet Explorer Multiple Vulnerabilities

10. Microsoft Windows Vector Markup Language Buffer Overflow

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Debian OpenSSL Predictable Random Number Generator and Update

2.	Microsoft Word Two Code Execution Vulnerabilities

3.	Microsoft Malware Protection Engine File Parsing Denial of Service

4.	Microsoft Publisher Object Handler Validation Vulnerability

5.	Ubuntu update for openssl

6.	Microsoft Windows XP I2O Utility Filter Driver Privilege Escalation

7.	Citrix Access Gateway Unspecified Authentication Bypass

8.	Internet Explorer "DisableCaching OfSSLPages" Weakness

9.	Novell Client Login Long Username/Contex t Buffer Overflow

10.	Gentoo update for aterm, eterm, rxvt, mrxvt, multi-aterm, wterm, and rxvt-unicode