Nortel Symposium Web Client vulnerabilities

2 CVEs affecting Nortel Symposium Web Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1305, published 2004-12-23.

More from Nortel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-1305, published 2004-12-23. Medium severity, CVSS 5.0. EPSS: 58.6% chance of exploitation in the next 30 days. The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame…
• CVE-2004-0839, published 2004-08-18. Medium severity, CVSS 5.0. EPSS: 34% chance of exploitation in the next 30 days. Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick…