PT-2010-2534 · Microsoft · Internet Explorer

Published 2010-03-31 · Updated 2021-07-23 · CVE-2010-0805

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 through 6 SP1

Description A remote code execution issue exists in the way Internet Explorer manages long URLs in certain situations. This could allow an attacker to execute arbitrary code via a specially crafted Web page, potentially gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 through 6 SP1, consider disabling the Tabular Data Control (TDC) ActiveX control as a temporary workaround until a patch is available. Restrict access to specially crafted Web pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-0805

ZDI-10-034

Affected Products

Internet Explorer

References · 16

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms10_018_ie_tabular_activex.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16567 · Exploit
• 🔥 https://exploit-db.com/exploits/12032 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0805 · Security Note
• http://vupen.com/english/advisories/2010/0744 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-10-034 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0805 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 · Vendor Advisory
• http://securityfocus.com/bid/39025 · Patch
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8080 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-018 · Note
• http://us-cert.gov/cas/techalerts/TA10-068A.html · Note
• http://zerodayinitiative.com/advisories/ZDI-10-034 · Note
• http://securityfocus.com/archive/1/510507/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA10-089A.html · Note