CVE-2004-1050

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

CVSS Metrics

Affected Products (28)

GitHub Security Advisory GHSA-r65h-9rm3-h7gm

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary...

References (24)

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html
• http://marc.info/?l=bugtraq&m=109942758911846&w=2
• http://secunia.com/advisories/12959/
• http://www.kb.cert.org/vuls/id/842160 Third Party Advisory, US Government Resource
• http://www.securityfocus.com/archive/1/379261
• http://www.securityfocus.com/bid/11515
• http://www.us-cert.gov/cas/techalerts/TA04-315A.html US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA04-336A.html US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17889
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html
• http://marc.info/?l=bugtraq&m=109942758911846&w=2