CVE-2004-1050
10.0
CVSS v2.0 Base Score
81.51%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
Published: 12/31/2004
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
10
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
81.51%HIGH Exploitation Risk
99th percentile
This vulnerability has a 81.51% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other