CVE-2004-1050

CRITICAL 10.0CVE-2004-1050 · Published 31/12/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
ip600 media servers avaya	`= r10= r11= r12= r6= r7= r8= r9`	No fix yet
ie microsoft	`= 6.0`	No fix yet
internet explorer microsoft	`= 6.0`	No fix yet

Description

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

References

lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html
marc.info
secunia.com/advisories/12959
kb.cert.org/vuls/id/842160 · Third Party Advisory
securityfocus.com/archive/1/379261
securityfocus.com/bid/11515
us-cert.gov/cas/techalerts/TA04-315A.html · US Government Resource
us-cert.gov/cas/techalerts/TA04-336A.html · US Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040
exchange.xforce.ibmcloud.com/vulnerabilities/17889
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free