ByteOS Network

Vulnerability Details :

CVE-2004-1050

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-18 Nov, 2004 | 05:00

Updated At-08 Aug, 2024 | 00:38

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:18 Nov, 2004 | 05:00

Updated At:08 Aug, 2024 | 00:38

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.kb.cert.org/vuls/id/842160	third-party-advisory x_refsource_CERT-VN
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html	mailing-list x_refsource_FULLDISC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040	vendor-advisory x_refsource_MS
http://marc.info/?l=bugtraq&m=109942758911846&w=2	mailing-list x_refsource_BUGTRAQ
http://www.securityfocus.com/bid/11515	vdb-entry x_refsource_BID
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294	vdb-entry signature x_refsource_OVAL
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html	mailing-list x_refsource_FULLDISC
http://www.us-cert.gov/cas/techalerts/TA04-315A.html	third-party-advisory x_refsource_CERT
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889	vdb-entry x_refsource_XF
http://secunia.com/advisories/12959/	third-party-advisory x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/379261	mailing-list x_refsource_BUGTRAQ
http://www.us-cert.gov/cas/techalerts/TA04-336A.html	third-party-advisory x_refsource_CERT

Hyperlink: http://www.kb.cert.org/vuls/id/842160

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: http://marc.info/?l=bugtraq&m=109942758911846&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.securityfocus.com/bid/11515

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html

Resource:

mailing-list

x_refsource_FULLDISC

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-315A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/17889

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://secunia.com/advisories/12959/

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.securityfocus.com/archive/1/379261

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-336A.html

Resource:

third-party-advisory

x_refsource_CERT

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.kb.cert.org/vuls/id/842160	third-party-advisory x_refsource_CERT-VN x_transferred
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html	mailing-list x_refsource_FULLDISC x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040	vendor-advisory x_refsource_MS x_transferred
http://marc.info/?l=bugtraq&m=109942758911846&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.securityfocus.com/bid/11515	vdb-entry x_refsource_BID x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294	vdb-entry signature x_refsource_OVAL x_transferred
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html	mailing-list x_refsource_FULLDISC x_transferred
http://www.us-cert.gov/cas/techalerts/TA04-315A.html	third-party-advisory x_refsource_CERT x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/12959/	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.securityfocus.com/archive/1/379261	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.us-cert.gov/cas/techalerts/TA04-336A.html	third-party-advisory x_refsource_CERT x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/842160

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=109942758911846&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.securityfocus.com/bid/11515

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html

Resource:

mailing-list

x_refsource_FULLDISC

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-315A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/17889

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://secunia.com/advisories/12959/

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/379261

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA04-336A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:31 Dec, 2004 | 05:00

Updated At:03 Apr, 2025 | 01:03

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

Hyperlink	Source	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html	cve@mitre.org	N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=109942758911846&w=2	cve@mitre.org	N/A
http://secunia.com/advisories/12959/	cve@mitre.org	N/A
http://www.kb.cert.org/vuls/id/842160	cve@mitre.org	Third Party Advisory US Government Resource
http://www.securityfocus.com/archive/1/379261	cve@mitre.org	N/A
http://www.securityfocus.com/bid/11515	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA04-315A.html	cve@mitre.org	US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-336A.html	cve@mitre.org	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294	cve@mitre.org	N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://marc.info/?l=bugtraq&m=109942758911846&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/12959/	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.kb.cert.org/vuls/id/842160	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
http://www.securityfocus.com/archive/1/379261	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/11515	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA04-315A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-336A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/17889	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294	af854a3a-2127-422b-91ae-364da2661108	N/A

CVE-2004-1050

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs