Vulnerability in Avaya Definity_one_media_server
CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the…
EPSS: 0.671 (99.2th percentile) — read the EPSS interpretation.
Affected products
- Avaya Definity_one_media_server — versions r6, r7, r8
- Avaya Ip600_media_servers — versions r6, r7, r8
- Avaya Modular_messaging_message_storage_server — versions s3400
- Avaya S3400
- Avaya S8100 — versions r6, r7, r8
- Microsoft Ie — versions 6.0
- Microsoft Internet_explorer — versions 6.0
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)