Internet Explorer DHTML Edit ActiveX Control Cross-Site Scripting

Secunia Advisory: SA13482 Release Date: 2004-12-16

[pendanticist]

[secunia.com...]

The vulnerability is caused due to an error in the DHTML Edit ActiveX control when handling the "execScript()" function in certain situations. This can be exploited to execute arbitrary script code in a user's browser session in context of an arbitrary site.

[tedster]

On that same page - a note about a PDF vulnerability that can be fixed with an update.