CVEvulnerability

CVE-2010-1118

10.0 HIGH Published 2010-03-25 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2010-03-25
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Affected configurations

• microsoft internet explorer 8

References

http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010 dvlabs.tippingpoint.com
http://news.cnet.com/8301-27080_3-20001126-245.html news.cnet.com
http://twitter.com/thezdi/statuses/11003801960 twitter.com
http://vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdf Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/57197 exchange.xforce.ibmcloud.com
http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010 dvlabs.tippingpoint.com
http://news.cnet.com/8301-27080_3-20001126-245.html news.cnet.com
http://twitter.com/thezdi/statuses/11003801960 twitter.com
http://vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdf Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/57197 exchange.xforce.ibmcloud.com