CVE-2004-1050: Avaya Definity One Media Server

High severity, CVSS 10.0. EPSS: 67.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

Affected products

• Avaya Definity One Media Server: any version; version r6 only; version r7 only; version r8 only; version r9 only; version r10 only; …
• Avaya IP600 Media Servers: any version; version r6 only; version r7 only; version r8 only; version r9 only; version r10 only; …
• Avaya Modular Messaging Message Storage Server: version s3400 only
• Avaya s3400: any version
• Avaya s8100: any version; version r6 only; version r7 only; version r8 only; version r9 only; version r10 only; …
• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 6.0 only

Published 2004-12-31. Last modified 2026-06-16.