CVE-2010-0491

Summary

Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka "HTML Object Memory Corruption Vulnerability."

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8421
• http://www.securityfocus.com/bid/39027
• http://www.us-cert.gov/cas/techalerts/TA10-089A.html
• http://www.us-cert.gov/cas/techalerts/TA10-068A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864
• http://www.vupen.com/english/advisories/2010/0744
• http://securitytracker.com/id?1023773

References

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8421
• http://www.securityfocus.com/bid/39027
• http://www.us-cert.gov/cas/techalerts/TA10-089A.html
• http://www.us-cert.gov/cas/techalerts/TA10-068A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864
• http://www.vupen.com/english/advisories/2010/0744
• http://securitytracker.com/id?1023773

• ←Previous
• Next→