Published: 31/12/2004 Updated: 23/07/2021

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in Internet Explorer 6 allows remote malicious users to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
avaya ip600 media servers
avaya ip600 media servers r10
microsoft internet explorer 6.0
microsoft ie 6.0
avaya definity one media server r8
avaya definity one media server r9
avaya s3400
avaya s8100 r8
avaya s8100 r9
avaya ip600 media servers r8
avaya ip600 media servers r9
avaya definity one media server r6
avaya definity one media server r7
avaya s8100 r6
avaya s8100 r7
avaya ip600 media servers r6
avaya ip600 media servers r7
avaya definity one media server r11
avaya definity one media server r12
avaya s8100 r11
avaya s8100 r12
avaya ip600 media servers r11
avaya ip600 media servers r12
avaya definity one media server
avaya definity one media server r10
avaya s8100
avaya s8100 r10
avaya modular messaging message storage server s3400

<HTML><!-- ________________________________________________________________________________ ,sSSSs, Ss, Internet Exploiter v01 SS" `YS' '*Ss MSIE <IFRAME src= name=""> BoF PoC exploit iS' ,SS" Copyright (C) 2003, 2004 by Berend-Jan Wever YS, ss ,sY" wwweduptudelftnl/ ...

NVD-CWE-Other http://www.securityfocus.com/bid/11515 http://www.kb.cert.org/vuls/id/842160 http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html http://www.securityfocus.com/archive/1/379261 http://www.us-cert.gov/cas/techalerts/TA04-315A.html http://www.us-cert.gov/cas/techalerts/TA04-336A.html http://secunia.com/advisories/12959/http://marc.info/?l=bugtraq&m=109942758911846&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17889 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040 https://nvd.nist.gov https://www.exploit-db.com/exploits/612/https://www.kb.cert.org/vuls/id/842160

CVE-2004-1050

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect