CVE-2004-1050
57Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 67%
from disclosure to weapon0 days
Published on NVDNov 18
1st PoCNov 2
VulnCheck+13d
exploitation probability
67%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/612⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.htmlhttp://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.htmlhttp://marc.info/?l=bugtraq&m=109942758911846&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040http://secunia.com/advisories/12959/https://exchange.xforce.ibmcloud.com/vulnerabilities/17889https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294http://www.kb.cert.org/vuls/id/842160http://www.securityfocus.com/archive/1/379261http://www.securityfocus.com/bid/11515http://www.us-cert.gov/cas/techalerts/TA04-315A.htmlhttp://www.us-cert.gov/cas/techalerts/TA04-336A.html