Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-3328
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-3328

2010-10-1319:00:46
CWE-416
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.881 High

EPSS

Percentile

98.7%

JSON

Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object, aka β€œUninitialized Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
AND
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch7
AND
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_vistaMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch8
AND
microsoftwindows_7Match-
OR
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_server_2003Match-sp2x64
OR
microsoftwindows_server_2008Match-
OR
microsoftwindows_server_2008Match--x64
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_vistaMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3

Related

checkpoint_advisories 2
zdi 1
cvelist 1
cve 1
prion 1
symantec 1
seebug 1
securityvulns 2
openvas 2
nessus 1
checkpoint_advisories
checkpoint_advisories
Internet Explorer CSS Rule Handling Memory Corruption (MS10-071; CVE-2010-3328)
2010-10-12 00:00:00
Microsoft Internet Explorer Rule Use After Free - Ver2 (CVE-2010-3328)
2014-01-28 00:00:00
zdi
zdi
Microsoft Internet Explorer Stylesheet PrivateFind Remote Code Execution Vulnerability
2010-10-12 00:00:00
cvelist
cvelist
CVE-2010-3328
2010-10-13 18:00:00
cve
cve
CVE-2010-3328
2010-10-13 19:00:46
prion
prion
Memory corruption
2010-10-13 19:00:00
symantec
symantec
Microsoft Internet Explorer Uninitialized Memory CVE-2010-3328 Remote Code Execution Vulnerability
2010-10-12 00:00:00
seebug
seebug
Microsoft IE倚δΈͺζœͺεˆε§‹εŒ–ε†…ε­˜θΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄žοΌˆMS10-071οΌ‰
2010-10-15 00:00:00
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2010-10-13 00:00:00
Microsoft Security Bulletin MS10-071 - Critical Cumulative Security Update for Internet Explorer (2360131)
2010-10-13 00:00:00
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2360131)
2010-10-13 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2360131)
2010-10-13 00:00:00
nessus
nessus
MS10-071: Cumulative Security Update for Internet Explorer (2360131)
2010-10-13 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.881 High

EPSS

Percentile

98.7%

JSON
Related for NVD:CVE-2010-3328
checkpoint_advisories2zdi1cvelist1cve1prion1symantec1seebug1securityvulns2openvas2nessus1