Lucene search

[email protected]NVD:CVE-2010-1260

HistoryJun 08, 2010 - 10:30 p.m.

CVE-2010-1260

2010-06-0822:30:01

CWE-94

[email protected]

web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.947 High

EPSS

Percentile

99.3%

JSON

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka “HTML Element Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftinternet_explorerMatch8

AND

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2x64

microsoftwindows_7Match-

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008Matchr2itanium

microsoftwindows_server_2008Matchr2x64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpsp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

References

osvdb.org/65213

support.avaya.com/css/P8/documents/100089747

www.us-cert.gov/cas/techalerts/TA10-159B.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.947 High

EPSS

Percentile

99.3%

JSON

Related for NVD:CVE-2010-1260

cvelist1 cve1 prion1 seebug1 securityvulns2 openvas2 mskb1 nessus1