PT-2010-2833 · Microsoft · Windows 7+1

Publicado 2010-03-25 · Atualizado 2021-07-23 · CVE-2010-1117

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer 8 on Microsoft Windows 7

Description A heap-based buffer overflow issue allows remote attackers to discover the base address of a Windows .dll file, and possibly have other unspecified impacts, via unknown vectors. This was demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Recommendations For Internet Explorer 8 on Microsoft Windows 7, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-1117

Produtos afetados

Internet Explorer 8

Windows 7

Referências · 6

• 🔥 http://vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdf · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57196 · Nota
• http://news.cnet.com/8301-27080_3-20001126-245.html · Nota
• http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1117 · Nota de Segurança
• http://twitter.com/thezdi/statuses/11003801960 · Nota