oval:org.mitre.oval:def:3496

Definition Id: oval:org.mitre.oval:def:3496

Oval ID:	oval:org.mitre.oval:def:3496
Title:	Windows NT IE HTML Help ActiveX control Cross Domain Vulnerability
Description:	Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2004-1043	Version:	3
Platform(s):	Microsoft Windows NT	Product(s):	HTML Help ActiveX Control
Definition Synopsis:
Software section Windows NT Server 4.0 is installed Microsoft Windows NT is installed AND Windows NT server product option this is an NT Server (stand-alone) AND this is an NT Server (domain controller) AND the version of hhctrl.ocx is less than 5.2.3790.233 AND NOT the patch Q890175 is installed AND Configuration section ActiveX controls and active scripting are enabled current user settings are being used and ActiveX controls and active scripting are enabled NOT use machine settings rather than individual user settings AND ActiveX controls are enabled for the current user AND active scripting is enabled for the current user OR local machine settings are being used and ActiveX controls and active scripting are enabled use machine settings rather than individual user settings AND ActiveX controls are enabled for the local machine AND active scripting is enabled for the local machine

Definition Id: oval:org.mitre.oval:def:36

Oval ID:	oval:org.mitre.oval:def:36
Title:	Microsoft Windows NT is installed
Description:	The operating system installed on the system is Microsoft Windows NT.
Family:	windows	Class:	inventory
Reference(s):	cpe:/o:microsoft:windows_nt	Version:	6
Platform(s):	Microsoft Windows NT	Product(s):
Definition Synopsis:
the installed operating system is part of the Microsoft Windows family AND Windows NT 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:3496

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0426s

Facebook rss twitter linkedin mail