CVE-2010-1258

EPSS 20.57%
Published 11.08.2010 18:47:49
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version6

   Microsoft ≫ Windows 2003 Server Updatesp2
   Microsoft ≫ Windows 2003 Server Updatesp2 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Version- Updatesp2 Editionx64

Microsoft ≫ Internet Explorer Version7

   Microsoft ≫ Windows 2003 Server Updatesp2
   Microsoft ≫ Windows 2003 Server Updatesp2 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx32
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionitanium
   Microsoft ≫ Windows Vista Updatesp1
   Microsoft ≫ Windows Vista Updatesp2
   Microsoft ≫ Windows Vista Version- Updatesp1
   Microsoft ≫ Windows Vista Version- Updatesp2
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Version- Updatesp2 Editionx64

Microsoft ≫ Internet Explorer Version8

   Microsoft ≫ Windows 2003 Server Updatesp2 Editionitanium
   Microsoft ≫ Windows 7
   Microsoft ≫ Windows 7 Version-
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Updater2 Editionitanium
   Microsoft ≫ Windows Server 2008 Updater2 Editionx64
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx32
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionitanium
   Microsoft ≫ Windows Vista Updatesp1
   Microsoft ≫ Windows Vista Updatesp2
   Microsoft ≫ Windows Vista Version- Updatesp1
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Version- Updatesp2 Editionx64

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	20.57%	0.954

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.us-cert.gov/cas/techalerts/TA10-222A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954

https://nvd.nist.gov/vuln/detail/CVE-2010-1258

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-1258

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-1258

EUVD