Avaya IP600 Media Servers vulnerabilities

9 CVEs affecting Avaya IP600 Media Servers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-1765, published 2007-03-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1050, published 2004-12-31. High severity, CVSS 10.0. EPSS: 67.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally…
CVE-2004-0212, published 2004-08-06. High severity, CVSS 10.0. EPSS: 63.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file…
CVE-2004-0842, published 2004-12-23. High severity, CVSS 7.5. EPSS: 56.6% chance of exploitation in the next 30 days. Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading…
CVE-2007-1765, published 2007-03-30. High severity, CVSS 9.3. EPSS: 54.6% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file,…
CVE-2004-0841, published 2004-12-23. Medium severity, CVSS 5.0. EPSS: 48.7% chance of exploitation in the next 30 days. Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3"…
CVE-2004-0201, published 2004-08-06. High severity, CVSS 10.0. EPSS: 45.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a…
CVE-2004-0839, published 2004-08-18. Medium severity, CVSS 5.0. EPSS: 34% chance of exploitation in the next 30 days. Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick…
CVE-2004-0205, published 2004-08-06. High severity, CVSS 7.2. EPSS: 24.5% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.
CVE-2004-0215, published 2004-08-06. Medium severity, CVSS 5.0. EPSS: 15.6% chance of exploitation in the next 30 days. Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.