Lucene search

[email protected]CVE-2010-0492

HistoryMar 31, 2010 - 7:30 p.m.

CVE-2010-0492

2010-03-3119:30:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2010-0492

use-after-free vulnerability

mstime.dll

microsoft internet explorer 8

remote code execution

memory corruption

html

object memory corruption vulnerability

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.869 High

EPSS

Percentile

98.6%

JSON

Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka “HTML Object Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftinternet_explorerMatch8

microsoftinternet_explorerMatch8.0.6001

AND

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2itanium

microsoftwindows_7Match-

microsoftwindows_server_2003sp2

microsoftwindows_server_2008x64

microsoftwindows_server_2008r2itanium

microsoftwindows_server_2008r2x64

microsoftwindows_server_2008sp2x64

microsoftwindows_vista

microsoftwindows_vistax64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

microsoftwindows_xpsp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

CPENameOperatorVersion
microsoft:internet_explorermicrosoft internet explorereq8
microsoft:internet_explorermicrosoft internet explorereq8.0.6001
microsoft:windows_2003_servermicrosoft windows 2003 servereq*
microsoft:windows_7microsoft windows 7eq-
microsoft:windows_server_2003microsoft windows server 2003eq*
microsoft:windows_server_2008microsoft windows server 2008eq*
microsoft:windows_vistamicrosoft windows vistaeq*
microsoft:windows_vistamicrosoft windows vistaeq-
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_xpmicrosoft windows xpeq-

CPE	Name	Operator	Version
microsoft:internet_explorer	microsoft internet explorer	eq	8
microsoft:internet_explorer	microsoft internet explorer	eq	8.0.6001
microsoft:windows_2003_server	microsoft windows 2003 server	eq	*
microsoft:windows_7	microsoft windows 7	eq	-
microsoft:windows_server_2003	microsoft windows server 2003	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	*
microsoft:windows_vista	microsoft windows vista	eq	*
microsoft:windows_vista	microsoft windows vista	eq	-
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_xp	microsoft windows xp	eq	-