CVE-2004-1050

CVE-2004-1050 describes a critical heap-based buffer overflow in Internet Explorer 6, affecting both Microsoft and Avaya products. This vulnerability allows remote attackers to execute arbitrary code by supplying excessively long SRC or NAME attributes within IFRAME, FRAME, or EMBED HTML elements. With a CVSS score of 10.0, it represents a severe threat due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not on the CISA KEV catalog, exploit code is publicly available via ExploitDB, and it garners significant community discussion, indicating its historical relevance and potential for exploitation.