Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-1050

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Published

2004-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	avaya	ip600_media_servers	*	Yes
Application	avaya	ip600_media_servers	r6	Yes
Application	avaya	ip600_media_servers	r7	Yes
Application	avaya	ip600_media_servers	r8	Yes
Application	avaya	ip600_media_servers	r9	Yes
Application	avaya	ip600_media_servers	r10	Yes
Application	avaya	ip600_media_servers	r11	Yes
Application	avaya	ip600_media_servers	r12	Yes
Application	microsoft	ie	6.0	Yes
Application	microsoft	internet_explorer	6.0	Yes
Hardware	avaya	definity_one_media_server	*	Yes
Hardware	avaya	definity_one_media_server	r6	Yes
Hardware	avaya	definity_one_media_server	r7	Yes
Hardware	avaya	definity_one_media_server	r8	Yes
Hardware	avaya	definity_one_media_server	r9	Yes
Hardware	avaya	definity_one_media_server	r10	Yes
Hardware	avaya	definity_one_media_server	r11	Yes
Hardware	avaya	definity_one_media_server	r12	Yes
Hardware	avaya	s3400	*	Yes
Hardware	avaya	s8100	*	Yes
Hardware	avaya	s8100	r6	Yes
Hardware	avaya	s8100	r7	Yes
Hardware	avaya	s8100	r8	Yes
Hardware	avaya	s8100	r9	Yes
Hardware	avaya	s8100	r10	Yes
Hardware	avaya	s8100	r11	Yes
Hardware	avaya	s8100	r12	Yes
Operating System	avaya	modular_messaging_message_storage_server	s3400	Yes

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html ([email protected])
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html ([email protected])
http://marc.info/?l=bugtraq&m=109942758911846&w=2 ([email protected])
http://secunia.com/advisories/12959/ ([email protected])
http://www.kb.cert.org/vuls/id/842160 Third Party Advisory, US Government Resource ([email protected])
http://www.securityfocus.com/archive/1/379261 ([email protected])
http://www.securityfocus.com/bid/11515 ([email protected])
http://www.us-cert.gov/cas/techalerts/TA04-315A.html US Government Resource ([email protected])
http://www.us-cert.gov/cas/techalerts/TA04-336A.html US Government Resource ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889 ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294 ([email protected])
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html (af854a3a-2127-422b-91ae-364da2661108)
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=109942758911846&w=2 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/12959/ (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/842160 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/379261 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/11515 (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA04-315A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA04-336A.html US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889 (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294 (af854a3a-2127-422b-91ae-364da2661108)