PT-2010-2049 · Microsoft · Internet Explorer

Published 2010-01-15 · Updated 2026-05-20 · CVE-2010-0249

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8

Description The issue allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory. This has been exploited in the wild during Operation Aurora. An attacker could exploit the vulnerability by constructing a specially crafted Web page, potentially gaining the same user rights as the logged-on user. If a user is logged on with administrative user rights, an attacker could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Internet Explorer versions 6 through 8, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to Web pages from untrusted sources until a patch is available. Avoid viewing specially crafted Web pages that could exploit the vulnerability.

Exploit

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2010-0249

Affected Products

Internet Explorer

References · 22

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_002_aurora.rb · Exploit
• 🔥 https://exploit-db.com/exploits/11167 · Exploit
• 🔥 https://exploit-db.com/exploits/16599 · Exploit
• 🔥 http://exploit-db.com/exploits/11167 · Exploit
• 🔥 http://securityfocus.com/bid/37815 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0249 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0249 · Security Note
• https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352 · Security Note
• http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx · Vendor Advisory
• http://support.microsoft.com/kb/979352 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 · Vendor Advisory
• http://microsoft.com/technet/security/advisory/979352.mspx · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-002 · Note
• http://us-cert.gov/cas/techalerts/TA10-055A.html · Note
• http://securitytracker.com/id?1023462 · Note