CVE-2010-0806
KEV
🔴 Łataj teraz
Wykorzystanie zwolnionego obiektu w Internet Explorerze umożliwia zdalne wykonanie kodu.
CVSS
8.8
EPSS
87.3%
Exploit
weaponized
Vendor
microsoft
Opis źródłowy (NVD)
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 8.8 |
| CISA KEV (aktywnie wykorzystywane) | Tak |
| FIRST EPSS (prawdopodobieństwo exploita) | 87.3% |
| Opublikowano (NVD) | 2010-03-10 22:30:01 UTC |
| Ostatnia modyfikacja (NVD) | 2026-05-21 12:57:10 UTC |
Referencje
- http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx (secure@microsoft.com) [Broken Link]
- http://osvdb.org/62810 (secure@microsoft.com) [Broken Link]
- http://secunia.com/advisories/38860 (secure@microsoft.com) [Vendor Advisory]
- http://www.kb.cert.org/vuls/id/744549 (secure@microsoft.com) [Patch, US Government Resource]
- http://www.microsoft.com/technet/security/advisory/981374.mspx (secure@microsoft.com) [Patch, Vendor Advisory, Broken Link]
- http://www.securityfocus.com/bid/38615 (secure@microsoft.com) [Broken Link]
- http://www.us-cert.gov/cas/techalerts/TA10-068A.html (secure@microsoft.com) [US Government Resource]
- http://www.us-cert.gov/cas/techalerts/TA10-089A.html (secure@microsoft.com) [US Government Resource]
- http://www.vupen.com/english/advisories/2010/0567 (secure@microsoft.com) [Vendor Advisory]
- http://www.vupen.com/english/advisories/2010/0744 (secure@microsoft.com) [Vendor Advisory]
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 (secure@microsoft.com) [Vendor Advisory]
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56772 (secure@microsoft.com) [Third Party Advisory, VDB Entry]
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446 (secure@microsoft.com) [Broken Link]
- https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [Vendor Advisory]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [US Government Resource]