PT-2010-2833 · Microsoft · Windows 7+1

Published 2010-03-25 · Updated 2021-07-23 · CVE-2010-1117

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer 8 on Microsoft Windows 7

Description A heap-based buffer overflow issue allows remote attackers to discover the base address of a Windows .dll file, and possibly have other unspecified impacts, via unknown vectors. This was demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Recommendations For Internet Explorer 8 on Microsoft Windows 7, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-1117

Affected Products

Internet Explorer 8

Windows 7

References · 6

• 🔥 http://vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1117 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57196 · Note
• http://news.cnet.com/8301-27080_3-20001126-245.html · Note
• http://dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010 · Note
• http://twitter.com/thezdi/statuses/11003801960 · Note