CVEvulnerability
CVE-2010-1262
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruption Vulnerability."
Affected configurations
• microsoft internet explorer 8
• microsoft internet explorer 6
• microsoft internet explorer 7
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://support.avaya.com/css/P8/documents/100089747 support.avaya.com
- http://www.securityfocus.com/archive/1/511727/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40417 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA10-159B.html US Government Resource
- http://www.zerodayinitiative.com/advisories/ZDI-10-102/ www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7406 oval.cisecurity.org
- http://support.avaya.com/css/P8/documents/100089747 support.avaya.com
- http://www.securityfocus.com/archive/1/511727/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40417 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA10-159B.html US Government Resource
- http://www.zerodayinitiative.com/advisories/ZDI-10-102/ www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7406 oval.cisecurity.org