Lucene search

K
cveMicrosoftCVE-2010-1117
HistoryMar 25, 2010 - 9:00 p.m.

CVE-2010-1117

2010-03-2521:00:01
CWE-119
microsoft
web.nvd.nist.gov
33
cve-2010-1117
internet explorer
buffer overflow
windows 7
cve
security vulnerability

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.011

Percentile

84.5%

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Affected configurations

Nvd
Node
microsoftinternet_explorerMatch8.0.6001
AND
microsoftwindows_7
VendorProductVersionCPE
microsoftinternet_explorer8.0.6001cpe:2.3:a:microsoft:internet_explorer:8.0.6001:*:*:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*

CVSS2

7.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

High

EPSS

0.011

Percentile

84.5%

Related for CVE-2010-1117