CVE

Id
9478  
CVE No.
CVE-2004-1050  
Status
Candidate  
Description
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."  
Phase
Assigned (20041117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63697 9478 CVE-2004-1050 FULLDISC:20041023 python does mangleme (with IE bugs!)  View
63698 9478 CVE-2004-1050 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html  View
63699 9478 CVE-2004-1050 FULLDISC:20041025 python does mangleme (with IE bugs!)  View
63700 9478 CVE-2004-1050 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html  View
63701 9478 CVE-2004-1050 BUGTRAQ:20041024 python does mangleme (with IE bugs!)  View
63702 9478 CVE-2004-1050 URL:http://www.securityfocus.com/archive/1/379261  View
63703 9478 CVE-2004-1050 BUGTRAQ:20041102 MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC  View
63704 9478 CVE-2004-1050 URL:http://marc.info/?l=bugtraq&m=109942758911846&w=2  View
63705 9478 CVE-2004-1050 MS:MS04-040  View
63706 9478 CVE-2004-1050 URL:http://www.microsoft.com/technet/security/Bulletin/MS04-040.mspx  View
63707 9478 CVE-2004-1050 CERT:TA04-315A  View
63708 9478 CVE-2004-1050 URL:http://www.us-cert.gov/cas/techalerts/TA04-315A.html  View
63709 9478 CVE-2004-1050 CERT:TA04-336A  View
63710 9478 CVE-2004-1050 URL:http://www.us-cert.gov/cas/techalerts/TA04-336A.html  View
63711 9478 CVE-2004-1050 CERT-VN:VU#842160  View
63712 9478 CVE-2004-1050 URL:http://www.kb.cert.org/vuls/id/842160  View
63713 9478 CVE-2004-1050 OVAL:oval:org.mitre.oval:def:1294  View
63714 9478 CVE-2004-1050 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1294  View
63715 9478 CVE-2004-1050 SECUNIA:12959  View
63716 9478 CVE-2004-1050 URL:http://secunia.com/advisories/12959/  View
63717 9478 CVE-2004-1050 BID:11515  View
63718 9478 CVE-2004-1050 URL:http://www.securityfocus.com/bid/11515  View
63719 9478 CVE-2004-1050 XF:ie-iframe-src-name-bo(17889)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63146 JVNDB-2004-000488 Sudo の環境変数の解析処理における任意のコマンドを実行される脆弱性 Sudo には、環境変数の妥当性の確認に不備が存在するため、Sudo ユーザが実行する bash シェルスクリプトから、実行権限を持たないプログラムが呼び出されることにより、そのプログラムの実行を許してしまう脆弱性が存在します。 CVE-2004-1051 9478 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000488.html  View