Strix
26.1K

CVE-2004-1050

UnknownEPSS 67.06%

Last modified

CVE-2004-1050 is a vulnerability of currently unknown severity. Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability.". EPSS estimates a 67.06% chance of exploitation in the next 30 days.

Description

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Metrics

EPSS Probability
67.06%

99.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersionsUpdate
AvayaIp600 Media ServersAll versions—
AvayaIp600 Media Serversr6—
AvayaIp600 Media Serversr7—
AvayaIp600 Media Serversr8—
AvayaIp600 Media Serversr9—
AvayaIp600 Media Serversr10—
AvayaIp600 Media Serversr11—
AvayaIp600 Media Serversr12—
MicrosoftIe6.0Sp1
MicrosoftInternet Explorer6.0—
AvayaDefinity One Media ServerAll versions—
AvayaDefinity One Media Serverr6—
AvayaDefinity One Media Serverr7—
AvayaDefinity One Media Serverr8—
AvayaDefinity One Media Serverr9—
AvayaDefinity One Media Serverr10—
AvayaDefinity One Media Serverr11—
AvayaDefinity One Media Serverr12—
AvayaS3400All versions—
AvayaS8100All versions—
AvayaS8100r6—
AvayaS8100r7—
AvayaS8100r8—
AvayaS8100r9—
AvayaS8100r10—
AvayaS8100r11—
AvayaS8100r12—
AvayaModular Messaging Message Storage Servers3400—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2004-1050?
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
How severe is CVE-2004-1050?
Severity scoring for CVE-2004-1050 is pending analysis. The EPSS model estimates a 67.06% probability of exploitation in the next 30 days.
How do I fix CVE-2004-1050?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-1050?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST