Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0806
HistoryMar 10, 2010 - 10:30 p.m.

CVE-2010-0806

2010-03-1022:30:01
CWE-399
[email protected]
web.nvd.nist.gov
127
cve-2010-0806
iepeers.dll
remote code execution
uninitialized memory corruption
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka β€œUninitialized Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch7
AND
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch7
AND
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008sp2x32
OR
microsoftwindows_server_2008Match-sp2itanium
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_vista
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
Node
microsoftinternet_explorerMatch6
AND
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serversp2
OR
microsoftwindows_2003_serversp2itanium
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64

Related

threatpost 4
checkpoint_advisories 3
openvas 4
canvas 1
saint 4
exploitpack 1
metasploit 1
seebug 3
prion 1
cert 1
nvd 1
packetstorm 2
cvelist 1
exploitdb 2
nessus 1
securityvulns 2
threatpost
threatpost
Microsoft Plugs IE Drive-By Download Flaws
2010-03-30 20:30:48
Exploit Code Published for Latest IE Zero-Day
2010-03-10 23:31:23
Old and Insecure, IE6 Still Popular in the Enterprise
2010-08-18 23:07:23
checkpoint_advisories
checkpoint_advisories
Internet Explorer iepeers.dll Remote Code Execution - Ver2 (CVE-2010-0806)
2014-01-07 00:00:00
Internet Explorer iepeers.dll Use-After-Free - Ver2 (CVE-2010-0806)
2014-02-03 00:00:00
Internet Explorer iepeers.dll Remote Code Execution (CVE-2010-0806)
2010-03-10 00:00:00
openvas
openvas
Microsoft Internet Explorer RCE Vulnerability (981374)
2010-03-10 00:00:00
MS Internet Explorer Remote Code Execution Vulnerability (981374)
2010-03-10 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (980182)
2010-04-01 00:00:00
canvas
canvas
Immunity Canvas: IE_PEERS_SETATTRIBUTE
2010-03-10 22:30:00
saint
saint
Internet Explorer iepeers.dll use-after-free vulnerability
2010-04-02 00:00:00
Internet Explorer iepeers.dll use-after-free vulnerability
2010-04-02 00:00:00
Internet Explorer iepeers.dll use-after-free vulnerability
2010-04-02 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer - iepeers.dll Use-After-Free (Metasploit)
2010-03-10 00:00:00
metasploit
metasploit
MS10-018 Microsoft Internet Explorer DHTML Behaviors Use After Free
2010-04-26 18:29:24
seebug
seebug
Microsoft IEη•Έε½’ε―Ήθ±‘ζ“δ½œε†…ε­˜η ΄εζΌζ΄ž
2010-03-10 00:00:00
Microsoft Internet Explorer iepeers.dll Use-After-Free Exploit (meta)
2014-07-01 00:00:00
Internet Explorer DHTML Behaviors Use After Free
2014-07-01 00:00:00
prion
prion
Memory corruption
2010-03-10 22:30:00
cert
cert
Microsoft Internet Explorer iepeers.dll use-after-free vulnerability
2010-03-09 00:00:00
nvd
nvd
CVE-2010-0806
2010-03-10 22:30:01
packetstorm
packetstorm
Microsoft Internet Explorer iepeers.dll Use After Free
2010-03-11 00:00:00
Internet Explorer DTHML Behaviors Use After Free
2010-04-01 00:00:00
cvelist
cvelist
CVE-2010-0806
2010-03-10 22:00:00
exploitdb
exploitdb
Microsoft Internet Explorer - DHTML Behaviour Use-After-Free (MS10-018) (Metasploit)
2010-12-14 00:00:00
Microsoft Internet Explorer - 'iepeers.dll' Use-After-Free (Metasploit)
2010-03-10 00:00:00
nessus
nessus
MS10-018: Cumulative Security Update for Internet Explorer (980182)
2010-03-30 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS10-018 - Critical Cumulative Security Update for Internet Explorer (980182)
2010-03-31 00:00:00
Microsoft Internet Explorer multiple security vulnerabilities
2010-04-05 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2010-0806
threatpost4checkpoint_advisories3openvas4canvas1saint4exploitpack1metasploit1seebug3prion1cert1nvd1packetstorm2cvelist1exploitdb2nessus1securityvulns2