CVE-2010-0806

🔴 Łataj teraz

Wykorzystanie zwolnionego obiektu w Internet Explorerze umożliwia zdalne wykonanie kodu.

CVSS

9.3

EPSS

89.5%

Exploit

none

Vendor

microsoft

Opis źródłowy (NVD)

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

brak Brak patcha

Źródła i daty

Źródło	Wartość
NVD – CVSS	9.3
CISA KEV (aktywnie wykorzystywane)	Nie
FIRST EPSS (prawdopodobieństwo exploita)	89.5%
Opublikowano (NVD)	2010-03-10 22:30:01 UTC
Ostatnia modyfikacja (NVD)	2026-04-29 01:13:23 UTC

Referencje

http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx (secure@microsoft.com)
http://osvdb.org/62810 (secure@microsoft.com)
http://secunia.com/advisories/38860 (secure@microsoft.com) [Vendor Advisory]
http://www.kb.cert.org/vuls/id/744549 (secure@microsoft.com) [Patch, US Government Resource]
http://www.microsoft.com/technet/security/advisory/981374.mspx (secure@microsoft.com) [Patch, Vendor Advisory]
http://www.securityfocus.com/bid/38615 (secure@microsoft.com)
http://www.us-cert.gov/cas/techalerts/TA10-068A.html (secure@microsoft.com) [US Government Resource]
http://www.us-cert.gov/cas/techalerts/TA10-089A.html (secure@microsoft.com) [US Government Resource]
http://www.vupen.com/english/advisories/2010/0567 (secure@microsoft.com) [Vendor Advisory]
http://www.vupen.com/english/advisories/2010/0744 (secure@microsoft.com) [Vendor Advisory]
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 (secure@microsoft.com)
https://exchange.xforce.ibmcloud.com/vulnerabilities/56772 (secure@microsoft.com)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446 (secure@microsoft.com)