Exploitation Summary
CVE-2004-1050 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Skylined.
AI-analyzed exploit summary This is a working proof-of-concept exploit for CVE-2004-1050, targeting a buffer overflow vulnerability in Microsoft Internet Explorer. It uses a heap spray technique to execute arbitrary shellcode, resulting in a bind shell on port 28876.
Description
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
Exploits (1)
This is a working proof-of-concept exploit for CVE-2004-1050, targeting a buffer overflow vulnerability in Microsoft Internet Explorer. It uses a heap spray technique to execute arbitrary shellcode, resulting in a bind shell on port 28876.