Lucene search

K
cve[email protected]CVE-2010-3962
HistoryNov 05, 2010 - 5:00 p.m.

CVE-2010-3962

2010-11-0517:00:00
CWE-416
web.nvd.nist.gov
52
cve-2010-3962
microsoft internet explorer
use-after-free vulnerability
remote code execution
css
clip attribute
invalid flag reference
uninitialized memory corruption vulnerability

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an “invalid flag reference” issue or “Uninitialized Memory Corruption Vulnerability,” as exploited in the wild in November 2010.

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%