CVE-2010-1260

Summary

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686
• http://support.avaya.com/css/P8/documents/100089747
• http://osvdb.org/65213
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035
• http://www.us-cert.gov/cas/techalerts/TA10-159B.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6686
• http://support.avaya.com/css/P8/documents/100089747
• http://osvdb.org/65213
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035
• http://www.us-cert.gov/cas/techalerts/TA10-159B.html

• ←Previous
• Next→