Lucene search
MicrosoftCVE-2010-2556HistoryAug 11, 2010 - 6:47 p.m.
CVE-2010-2556
2010-08-1118:47:50
CWE-908
microsoft
web.nvd.nist.gov
34
cve-2010-2556
microsoft
internet explorer
memory corruption
remote code execution
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.957
Percentile
99.5%
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka “Uninitialized Memory Corruption Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003Match-sp2
ORmicrosoftwindows_xpMatch-sp2x64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003Match-sp2
ORmicrosoftwindows_server_2008Match--
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch8
microsoftwindows_7Match-
ORmicrosoftwindows_server_2003Match-sp2
ORmicrosoftwindows_server_2008Match--
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | internet_explorer | 6 | cpe:/a:microsoft:internet_explorer:6::: |
Related
nvd
nvd
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
VUPEN Security Research - Microsoft Internet Explorer "OnPropertyChange_Src()" Use-after-free Vulnerability (CVE-2010-2556)
2010-08-11 00:00:00
Microsoft Security Bulletin MS10-053 - Critical Cumulative Security Update for Internet Explorer (2183461)
2010-08-11 00:00:00
Microsoft Internet Explorer multiple security vulnerabilities
2010-08-11 00:00:00
cvelist
cvelist
prion
prion
Memory corruption
2010-08-11 18:47:00
Memory corruption
2011-02-10 16:00:00
Memory corruption
2011-02-10 16:00:00
cve
cve
CVE-2011-0036
2011-02-10 16:00:13
CVE-2011-0035
2011-02-10 16:00:13
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2183461)
2010-08-11 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2183461)
2010-08-11 00:00:00
nessus
nessus
MS10-053: Cumulative Security Update for Internet Explorer (2183461)
2010-08-11 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.957
Percentile
99.5%
Related for CVE-2010-2556