Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruption Vulnerability."
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
21 Nov 2024, 01:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://support.avaya.com/css/P8/documents/100089747 - | |
| References | () http://www.securityfocus.com/archive/1/511727/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/40417 - | |
| References | () http://www.us-cert.gov/cas/techalerts/TA10-159B.html - US Government Resource | |
| References | () http://www.zerodayinitiative.com/advisories/ZDI-10-102/ - | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035 - | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7406 - |
07 Dec 2023, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:* |
Information
Published : 2010-06-08 22:30
Updated : 2024-11-21 01:14
NVD link : CVE-2010-1262
Mitre link : CVE-2010-1262
CVE.ORG link : CVE-2010-1262
JSON object : View
Products Affected
microsoft
- windows_server_2008
- windows_vista
- internet_explorer
- windows_2003_server
- windows_7
- windows_xp
- windows_2000
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')