CVE-2010-0247

EPSS 18.5%
Veröffentlicht 22.01.2010 22:00:00
Zuletzt bearbeitet 16.06.2026 23:15:47
Erkennungen
Login

Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 19 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version 6 Update sp1

Microsoft ≫ Windows 2000 Update sp4

Microsoft ≫ Internet Explorer Version 6

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2462.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2479.0006

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2600

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2600.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2800

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2800.1106

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2800.1106

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2900

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2900.2180

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2900.2180

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3663.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3718.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3790.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3790.1830

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3790.3959

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 5.01 Update sp4

Microsoft ≫ Windows 2000 Update sp4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	18.5%	0.969

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

https://exchange.xforce.ibmcloud.com/vulnerabilities/55777

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8506

https://nvd.nist.gov/vuln/detail/CVE-2010-0247

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0247

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0247

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-0247