CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary...
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
- Record
CVE-2004-1050- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
- Record
CVE-2004-1050- Updated
- 2026-11-02
EUVDEUVD-2004-1048 No score
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
- Record
EUVD-2004-1048- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r65h-9rm3-h7gm No score
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary...
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
- Record
GHSA-r65h-9rm3-h7gm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 6 - IFRAME Tag Buffer Overflow | 2004-11-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1050 is a high vulnerability (CVSS 10.0) in Microsoft Internet Explorer, published November 18, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 67.1%, the 99th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/842160
lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040
marc.info?l=bugtraq&m=109942758911846&w=2
securityfocus.com/bid/11515
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294
Show 8 moreShow less
us-cert.gov/cas/techalerts/TA04-315A.html
exchange.xforce.ibmcloud.com/vulnerabilities/17889
secunia.com/advisories/12959
nvd.nist.gov/vuln/detail/CVE-2004-1050
github.com/advisories/GHSA-r65h-9rm3-h7gm