10

CVE-2010-1118

Exploit

EPSS 36.59%
Veröffentlicht 25.03.2010 21:00:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version8

Microsoft ≫ Windows 7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	36.59%	0.968

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010

http://news.cnet.com/8301-27080_3-20001126-245.html

http://twitter.com/thezdi/statuses/11003801960

http://vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdf

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/57197

https://nvd.nist.gov/vuln/detail/CVE-2010-1118

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-1118

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-1118

EUVD