CVE-2004-1050

EXPLOITED

Avaya Ip600 Media Servers - Buffer Overflow

Title source: rule

Description

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED
by Skylined · htmlremotewindows
https://www.exploit-db.com/exploits/612

References (12)

Scores

EPSS 0.8151
EPSS Percentile 99.2%

Details

VulnCheck KEV 2004-12-01
Status published
Products (28)
avaya/definity_one_media_server
avaya/definity_one_media_server r6
avaya/definity_one_media_server r7
avaya/definity_one_media_server r8
avaya/definity_one_media_server r9
avaya/definity_one_media_server r10
avaya/definity_one_media_server r11
avaya/definity_one_media_server r12
avaya/ip600_media_servers
avaya/ip600_media_servers r6
... and 18 more
Published Dec 31, 2004
Tracked Since Feb 18, 2026