critical10.0Public exploit code

CVE-2004-1050

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, a…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Microsoft Internet Explorer 6 - IFRAME Tag Buffer Overflow2004-11-02 · remote · windows · Verified

Impact

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Affected products

Vendor	Product	Affected versions
Avaya	Ip600 Media Servers	All versions Versions r6, r7, r8, r9, r10
Microsoft	Ie	Version 6.0
Microsoft	Internet Explorer	Version 6.0
Avaya	Definity One Media Server	All versions Versions r6, r7, r8, r9, r10
Avaya	S3400	All versions
Avaya	S8100	All versions Versions r6, r7, r8, r9, r10
Avaya	Modular Messaging Message Storage Server	Version s3400

Public exploit code

Impact

Affected products

References