CVE-2010-0248

EPSS 53.09%
Veröffentlicht 22.01.2010 22:00:00
Zuletzt bearbeitet 16.06.2026 23:15:47
Erkennungen
Login

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 6

NVD 27 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version 8

   Microsoft ≫ Windows 7 Version -
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update r2 Edition itanium
   Microsoft ≫ Windows Server 2008 Update r2 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Vista Edition x64
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 8.0.6001

Microsoft ≫ Internet Explorer Version 7

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Vista Edition x64
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 7.0

Microsoft ≫ Internet Explorer Version 7.0.5730 Update unknown Edition gold

Microsoft ≫ Internet Explorer Version 7.0.5730.11

Microsoft ≫ Internet Explorer Version 7.00.5730.1100

Microsoft ≫ Internet Explorer Version 7.00.6000.16386

Microsoft ≫ Internet Explorer Version 7.00.6000.16441

Microsoft ≫ Internet Explorer Version 6 Update sp1

Microsoft ≫ Windows 2000 Update sp4

Microsoft ≫ Internet Explorer Version 6

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2462.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2479.0006

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2600

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2600.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2800

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2800.1106

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2800.1106

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2900

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.0.2900.2180

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.2900.2180

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3663.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3718.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3790.0000

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3790.1830

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ Internet Explorer Version 6.00.3790.3959

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	53.09%	0.988

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

https://exchange.xforce.ibmcloud.com/vulnerabilities/55778

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267

https://nvd.nist.gov/vuln/detail/CVE-2010-0248

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0248

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0248

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-0248