CVE:CVE-2004-1319
CNNVD:CNNVD-200412-065
DHTML编辑组件ActiveX控件为动态WEB站点提供HTML编辑功能。
Microsoft DHTML编辑组件ActiveX控件存在一个跨域漏洞，远程攻击者可以利用这个漏洞获得目标用户敏感信息或在目标系统上执行任意代码。
攻击者可以构建一个恶意WEB链接，诱使用户点击，可以以用户进程权限在系统上执行任意代码。目前没有详细漏洞细节提供。
solution:Upgrade nortel ip_softphone_2050 to a higher version than *; Upgrade nortel mobile_voice_client_2050 to a higher version than *; Upgrade nortel optivity_telephony_manager to a higher version than *; Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than enterprise,enterprise_64-bit,r2,standard,web,and avoid the version enterprise,enterprise_64-bit,r2,standard,web; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2