PT-2010-2252 · Microsoft · Internet Explorer

Published 2010-03-31 · Updated 2021-07-23 · CVE-2010-0491

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 through 6 SP1

Description A use-after-free issue allows remote attackers to execute arbitrary code by changing properties of an HTML object with an onreadystatechange event handler. The vulnerability exists in the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. An attacker could exploit this by constructing a specially crafted Web page, potentially allowing remote code execution and gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the system, install programs, view or modify data, or create new accounts.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 through 6 SP1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-0491

Affected Products

Internet Explorer

References · 11

• http://securityfocus.com/bid/39027 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0491 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0491 · Security Note
• http://us-cert.gov/cas/techalerts/TA10-089A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-018 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864 · Note
• http://us-cert.gov/cas/techalerts/TA10-068A.html · Note
• http://securitytracker.com/id?1023773 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8421 · Note