PT-2010-4739 · Microsoft · Internet Explorer

Published 2010-10-12 · Updated 2024-02-02 · CVE-2010-3328

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8

Description A use-after-free issue in the CAttrArray::PrivateFind function in mshtml.dll allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object. This could allow an attacker to gain the same user rights as the logged-on user, potentially leading to complete control of an affected system if the user has administrative rights. The attacker could exploit this by constructing a specially crafted Web page.

Recommendations For Microsoft Internet Explorer versions 6 through 8, consider disabling access to the CAttrArray::PrivateFind function as a temporary workaround until a patch is available. Restrict the use of stylesheet objects to minimize the risk of exploitation. Avoid viewing specially crafted Web pages that could trigger the vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2010-3328

ZDI-10-197

Affected Products

Internet Explorer

References · 11

• https://zerodayinitiative.com/advisories/ZDI-10-197 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3328 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3328 · Security Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-071 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7059 · Note
• https://t.me/cvenotify/69802 · Telegram Post
• http://securityfocus.com/bid/43705 · Note
• http://us-cert.gov/cas/techalerts/TA10-285A.html · Note
• http://support.avaya.com/css/P8/documents/100113324 · Note
• http://zerodayinitiative.com/advisories/ZDI-10-197 · Note