NVD

Id
71442  
Name
CVE-2004-1050  
Description
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-1050  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369427 71442 CVE-2004-1050 20041023 python does mangleme (with IE bugs!)  View
369428 71442 CVE-2004-1050 20041025 python does mangleme (with IE bugs!)  View
369429 71442 CVE-2004-1050 20041102 MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC  View
369430 71442 CVE-2004-1050 oval:org.mitre.oval:def:1294  View
369431 71442 CVE-2004-1050 VU#842160  View
369432 71442 CVE-2004-1050 MS04-040  View
369433 71442 CVE-2004-1050 20041024 python does mangleme (with IE bugs!)  View
369434 71442 CVE-2004-1050 11515  View
369435 71442 CVE-2004-1050 TA04-315A  View
369436 71442 CVE-2004-1050 TA04-336A  View
369437 71442 CVE-2004-1050 ie-iframe-src-name-bo(17889)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63127 JVNDB-2004-000469 Microsoft Internet Explorer の IFRAME および FRAMEタグにおけるバッファオーバーフローの脆弱性 Microsoft Internet Explorer には、IFRAME および FRAME タグの SRC や NAME 属性に対する境界チェックに不備が存在するため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-1050 9477 CVE-2004-1050 71442 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000469.html 2004-11-02 2007-04-01 View