CVE-2010-1127

2022-10-0316:21:01

mitre

www.cve.org

microsoft internet explorer

vulnerability

denial

6.7 Medium

AI Score

Confidence

High

0.142 Low

EPSS

Percentile

95.8%

JSON

Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code, as demonstrated by setting the (1) outerHTML or (2) value property of an object returned by createElement.