CVEvulnerability

CVE-2004-1050

10.0 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Affected configurations

• avaya ip600 media servers • avaya ip600 media servers r6 • avaya ip600 media servers r7 • avaya ip600 media servers r8 • avaya ip600 media servers r9 • avaya ip600 media servers r10 • avaya ip600 media servers r11 • avaya ip600 media servers r12 • microsoft ie 6.0 • microsoft internet explorer 6.0 • avaya definity one media server • avaya definity one media server r6 • avaya definity one media server r7 • avaya definity one media server r8 • avaya definity one media server r9 • avaya definity one media server r10 • avaya definity one media server r11 • avaya definity one media server r12 • avaya s3400 • avaya s8100 • avaya s8100 r6 • avaya s8100 r7 • avaya s8100 r8 • avaya s8100 r9 • avaya s8100 r10 • avaya s8100 r11 • avaya s8100 r12 • avaya modular messaging message storage server s3400

References