CVE-2010-3340

CVE-2010-3340 is an HTML Object Memory Corruption vulnerability in Microsoft Internet Explorer (IE6/IE7) that could allow remote code execution when a user views a specially crafted page. The issue arises from IE’s handling of memory objects that are uninitialized or have been deleted, enabling a...

iDefense Security Advisory 12.14.10: Microsoft Internet Explorer HTML Object Memory Corruption Vulnerability

iDefense Security Advisory 12.14.10 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 14, 2010 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. that has been included with Microsoft Windows since 1995. For more information about Internet Explorer,...

Internet Explorer HTML Object use after free Memory Corruption (MS10-090; CVE-2010-3340)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been initialized or has been deleted. To trigger this...