CyberSec.Space Logo
Back to CVE Browser

CVE-2004-1050

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1210%
EPSS Percentile7.91th
PublishedDec 31, 2004
Last ModifiedApr 16, 2026

Vulnerability Description

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Affected Platforms (CPE)

📦
Avaya

Ip600 Media Servers

All versions
📦
Avaya

Ip600 Media Servers

= r6
📦
Avaya

Ip600 Media Servers

= r7
📦
Avaya

Ip600 Media Servers

= r8
📦
Avaya

Ip600 Media Servers

= r9
📦
Avaya

Ip600 Media Servers

= r10
📦
Avaya

Ip600 Media Servers

= r11
📦
Avaya

Ip600 Media Servers

= r12
📦
Microsoft

Ie

= 6.0
📦
Microsoft

Internet Explorer

= 6.0
🔌
Avaya

Definity One Media Server

All versions
🔌
Avaya

Definity One Media Server

= r6
🔌
Avaya

Definity One Media Server

= r7
🔌
Avaya

Definity One Media Server

= r8
🔌
Avaya

Definity One Media Server

= r9
🔌
Avaya

Definity One Media Server

= r10
🔌
Avaya

Definity One Media Server

= r11
🔌
Avaya

Definity One Media Server

= r12
🔌
Avaya

S3400

All versions
🔌
Avaya

S8100

All versions
🔌
Avaya

S8100

= r6
🔌
Avaya

S8100

= r7
🔌
Avaya

S8100

= r8
🔌
Avaya

S8100

= r9
🔌
Avaya

S8100

= r10
🔌
Avaya

S8100

= r11
🔌
Avaya

S8100

= r12
💻
Avaya

Modular Messaging Message Storage Server

= s3400

References & Advisories

🔗 http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
🔗 http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html
🔗 http://marc.info/?l=bugtraq&m=109942758911846&w=2
🔗 http://secunia.com/advisories/12959/
🔗 http://www.kb.cert.org/vuls/id/842160
🔗 http://www.securityfocus.com/archive/1/379261
🔗 http://www.securityfocus.com/bid/11515
🔗 http://www.us-cert.gov/cas/techalerts/TA04-315A.html

Related Vulnerabilities

CVE-2004-039110.0

Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded use...

CVE-2004-040110.0

Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.

CVE-2004-044410.0

Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal F...

CVE-2004-042010.0

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows ...