CVE-2010-0491

2010-03-3119:30:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2010-0491

use-after-free

microsoft internet explorer

remote code execution

html object memory corruption vulnerability

nvd

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.949 High

EPSS

Percentile

99.3%

JSON

Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka “HTML Object Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq6
microsoft:windows_2003_servermicrosoft windows 2003 servereq*
microsoft:windows_server_2003microsoft windows server 2003eq*
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_xpmicrosoft windows xpeq-
microsoft:internet_explorermicrosoft internet explorereq5.01
microsoft:windows_2000microsoft windows 2000eq*

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	6
microsoft:windows_2003_server	microsoft windows 2003 server	eq	*
microsoft:windows_server_2003	microsoft windows server 2003	eq	*
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_xp	microsoft windows xp	eq	-
microsoft:internet_explorer	microsoft internet explorer	eq	5.01
microsoft:windows_2000	microsoft windows 2000	eq	*