CVEvulnerability
CVE-2010-0492
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-03-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."
Affected configurations
• microsoft internet explorer 8
• microsoft internet explorer 8.0.6001
• microsoft windows 2003 server
• microsoft windows 7
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://securitytracker.com/id?1023773 securitytracker.com
- http://www.securityfocus.com/archive/1/510506/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/39030 Patch
- http://www.us-cert.gov/cas/techalerts/TA10-068A.html US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA10-089A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0744 Patch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-033 www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722 oval.cisecurity.org
- http://securitytracker.com/id?1023773 securitytracker.com
- http://www.securityfocus.com/archive/1/510506/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/39030 Patch
- http://www.us-cert.gov/cas/techalerts/TA10-068A.html US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA10-089A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0744 Patch, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-033 www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722 oval.cisecurity.org