CVE-2004-1050

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 67.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Affected products

Avaya Definity One Media Server: r6, r7, r8, r9, r10, r11 (+1)
Avaya Ip600 Media Servers: r6, r7, r8, r9, r10, r11 (+1)
Avaya Modular Messaging Message Storage Server: s3400
Avaya S3400: all versions
Avaya S8100: r6, r7, r8, r9, r10, r11 (+1)
Microsoft Ie: 6.0-sp1
Microsoft Internet Explorer 11: 6.0

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html
http://marc.info/?l=bugtraq&m=109942758911846&w=2
http://secunia.com/advisories/12959/
http://www.kb.cert.org/vuls/id/842160
http://www.securityfocus.com/archive/1/379261
http://www.securityfocus.com/bid/11515
http://www.us-cert.gov/cas/techalerts/TA04-315A.html
http://www.us-cert.gov/cas/techalerts/TA04-336A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294

Get alerted when CVE-2004-1050 or the next vulnerability affects your stack