Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-0249
HistoryJan 15, 2010 - 5:30 p.m.

CVE-2010-0249

2010-01-1517:30:00
CWE-416
[email protected]
web.nvd.nist.gov
6

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.958

Percentile

99.5%

JSON

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka “HTML Object Memory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftinternet_explorerMatch5.0.1sp4
OR
microsoftinternet_explorerMatch6sp1
AND
microsoftwindows_2000Match-sp4
Node
microsoftinternet_explorerMatch6-
AND
microsoftwindows_server_2003Match-sp2itanium
OR
microsoftwindows_server_2003Match-sp2x64
OR
microsoftwindows_xpMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch7.0
AND
microsoftwindows_server_2003Match-sp2itanium
OR
microsoftwindows_server_2003Match-sp2x64
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_vistaMatch--x64
OR
microsoftwindows_vistaMatch-sp1-x64
OR
microsoftwindows_vistaMatch-sp2-x64
OR
microsoftwindows_xpMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch8
AND
microsoftwindows_7Match-
OR
microsoftwindows_server_2003Match-sp2x64
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistaMatch--x64
OR
microsoftwindows_vistaMatch-sp1-x64
OR
microsoftwindows_vistaMatch-sp2-x64
OR
microsoftwindows_xpMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3

Related

prion 1
cert 1
cve 1
securityvulns 3
saint 4
checkpoint_advisories 4
packetstorm 4
canvas 1
exploitpack 1
metasploit 1
symantec 1
openvas 4
cvelist 1
seebug 1
exploitdb 2
threatpost 1
mskb 1
nessus 1
prion
prion
Memory corruption
2010-01-15 17:30:00
cert
cert
Microsoft Internet Explorer HTML object memory corruption vulnerability
2010-01-14 00:00:00
cve
cve
CVE-2010-0249
2010-01-15 17:30:00
securityvulns
securityvulns
Code to mitigate IE event zero-day (CVE-2010-0249)
2010-01-19 00:00:00
Microsoft Internet Explorer Multiple security vulnerabilities
2010-01-23 00:00:00
Microsoft Security Bulletin MS10-002 - Critical Cumulative Security Update for Internet Explorer (978207)
2010-01-22 00:00:00
saint
saint
Internet Explorer Eventparam use-after-free vulnerability
2010-01-20 00:00:00
Internet Explorer Eventparam use-after-free vulnerability
2010-01-20 00:00:00
Internet Explorer Eventparam use-after-free vulnerability
2010-01-20 00:00:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer Invalid Pointer Reference Memory Corruption (CVE-2010-0249)
2010-01-17 00:00:00
Trojan: Aurora.Hydraq (CVE-2010-0249)
2010-01-27 00:00:00
Microsoft Internet Explorer HTML Object Memory Corruption Vulnerability Use After Free - Ver2 (CVE-2010-0249)
2014-04-16 00:00:00
packetstorm
packetstorm
Internet Explorer Aurora Exploit
2010-01-17 00:00:00
Microsoft Internet Explorer "Aurora" Memory Corruption
2010-01-18 00:00:00
Internet Explorer "Aurora" Memory Corruption
2010-03-11 00:00:00
canvas
canvas
Immunity Canvas: AURORA_FLASH
2010-01-15 17:30:00
exploitpack
exploitpack
Microsoft Internet Explorer 6 - Aurora Memory Corruption (MS10-002)
2010-01-17 00:00:00
metasploit
metasploit
MS10-002 Microsoft Internet Explorer "Aurora" Memory Corruption
2010-03-11 05:49:45
symantec
symantec
Internet Explorer CVE-2010-0249 'srcElement()' Remote Code Execution Vulnerability
2010-01-14 00:00:00
openvas
openvas
Microsoft Internet Explorer Remote Code Execution Vulnerability (979352)
2010-01-20 00:00:00
Microsoft Internet Explorer RCE Vulnerability (979352)
2010-01-20 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (978207)
2010-01-22 00:00:00
cvelist
cvelist
CVE-2010-0249
2010-01-15 17:00:00
seebug
seebug
Internet Explorer Aurora Exploit
2010-01-18 00:00:00
exploitdb
exploitdb
Microsoft Internet Explorer 6 - 'Aurora' Memory Corruption (MS10-002)
2010-01-17 00:00:00
Microsoft Internet Explorer - 'Aurora' Memory Corruption (MS10-002) (Metasploit)
2010-07-12 00:00:00
threatpost
threatpost
Microsoft Knew of IE Zero-Day Flaw Since September
2010-01-21 20:40:23
mskb
mskb
MS10-002: Cumulative security update for Internet Explorer
2014-06-23 07:27:25
nessus
nessus
MS10-002: Cumulative Security Update for Internet Explorer (978207)
2009-01-21 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.958

Percentile

99.5%

JSON
Related for NVD:CVE-2010-0249
prion1cert1cve1securityvulns3saint4checkpoint_advisories4packetstorm4canvas1exploitpack1metasploit1symantec1openvas4cvelist1seebug1exploitdb2threatpost1mskb1nessus1