Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability

Threat level definition

Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability

References:

Microsoft Security Bulletin MS05-001 (Microsoft)
Security Advisory Bulletins (Nortel Networks)
Technical Cyber Security Alert TA05-012B - Microsoft Windows HTML Help ActiveX (US-CERT)
How to Break Windows XP SP2 + Internet Explorer 6 SP2 ("http-equiv@excite.com " <1@malware.com>)
IE HHCTRL exploit still usable even after patch (Valentin Avram )
Internet Explorer Help ActiveX Control Local Zone Security (Paul )
Microsoft Internet Explorer SP2 Fully Automated Remote Compromise (Paul )
RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2 ("Thor Larholm" )
Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2 (michael evanchik )
Using DHTML XSS to launch HHCTRL exploit (Valentin Avram )

Privacy Statement
Copyright 2008, SecurityFocus