Login Request a demo
Unscored severity · published Dec 31, 2004
CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements,…
–
CVSS
67.1%
EPSS
No
On KEV
Description
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)67.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Definity One Media Server · Avaya
r6; r7; r8; r9; r10; r11; +1 more · source: NVD
IE
IE · Microsoft
6.0 · source: NVD
IE
Internet Explorer · Microsoft
6.0 · source: NVD
IM
Ip600 Media Servers · Avaya
r6; r7; r8; r9; r10; r11; +1 more · source: NVD
MM
Modular Messaging Message Storage Server · Avaya
s3400 · source: NVD
S3
S3400 · Avaya
All versions, or not specified · source: NVD
S8
S8100 · Avaya
r6; r7; r8; r9; r10; r11; +1 more · source: NVD
Affected product
DO
Definity One Media Server
Avaya
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1050
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1050
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html
marc.info
http://marc.info/?l=bugtraq&m=109942758911846&w=2
secunia.com
http://secunia.com/advisories/12959/
Third Party Advisory
http://www.kb.cert.org/vuls/id/842160
www.securityfocus.com
http://www.securityfocus.com/archive/1/379261
More from Definity One Media Server
–
CVE-2007-2374
Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors
–
CVE-2007-1765
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a…
–
CVE-2004-0841
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window,…
–
CVE-2004-0842
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain…
–
CVE-2004-0839
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and…