| ID |
CVE-2010-3346
|
| Summary |
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability." |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
-
cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 9.3 (as of 28-02-2022 - 19:22) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-908 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
| msbulletin
via4
|
| bulletin_id | MS10-090 | | bulletin_url | | | date | 2010-12-14T00:00:00 | | impact | Remote Code Execution | | knowledgebase_id | 2416400 | | knowledgebase_url | | | severity | Critical | | title | Cumulative Security Update for Internet Explorer |
|
| oval
via4
|
| accepted | 2014-08-18T04:00:24.630-04:00 | | class | vulnerability | | contributors | | name | Josh Turpin | | organization | Symantec Corporation |
| name | Sharath S | | organization | SecPod Technologies |
| name | Dragos Prisaca | | organization | Symantec Corporation |
| name | Maria Mikhno | | organization | ALTX-SOFT |
| name | Maria Mikhno | | organization | ALTX-SOFT |
| | definition_extensions | | comment | Microsoft Windows XP (32-bit) is installed | | oval | oval:org.mitre.oval:def:1353 |
| comment | Microsoft Internet Explorer 6 is installed | | oval | oval:org.mitre.oval:def:563 |
| comment | Microsoft Windows XP x64 is installed | | oval | oval:org.mitre.oval:def:15247 |
| comment | Microsoft Windows Server 2003 (32-bit) is installed | | oval | oval:org.mitre.oval:def:1870 |
| comment | Microsoft Windows Server 2003 (x64) is installed | | oval | oval:org.mitre.oval:def:730 |
| comment | Microsoft Windows Server 2003 (ia64) Gold is installed | | oval | oval:org.mitre.oval:def:396 |
| comment | Microsoft Internet Explorer 6 is installed | | oval | oval:org.mitre.oval:def:563 |
| comment | Microsoft Windows XP (32-bit) is installed | | oval | oval:org.mitre.oval:def:1353 |
| comment | Microsoft Windows XP x64 is installed | | oval | oval:org.mitre.oval:def:15247 |
| comment | Microsoft Windows Server 2003 (32-bit) is installed | | oval | oval:org.mitre.oval:def:1870 |
| comment | Microsoft Windows Server 2003 (x64) is installed | | oval | oval:org.mitre.oval:def:730 |
| comment | Microsoft Windows Server 2003 (ia64) Gold is installed | | oval | oval:org.mitre.oval:def:396 |
| comment | Microsoft Internet Explorer 7 is installed | | oval | oval:org.mitre.oval:def:627 |
| comment | Microsoft Windows Vista (32-bit) is installed | | oval | oval:org.mitre.oval:def:1282 |
| comment | Microsoft Windows Vista x64 Edition is installed | | oval | oval:org.mitre.oval:def:2041 |
| comment | Microsoft Windows Server 2008 (32-bit) is installed | | oval | oval:org.mitre.oval:def:4870 |
| comment | Microsoft Windows Server 2008 (64-bit) is installed | | oval | oval:org.mitre.oval:def:5356 |
| comment | Microsoft Windows Server 2008 (ia-64) is installed | | oval | oval:org.mitre.oval:def:5667 |
| comment | Microsoft Internet Explorer 7 is installed | | oval | oval:org.mitre.oval:def:627 |
| comment | Microsoft Windows Vista (32-bit) is installed | | oval | oval:org.mitre.oval:def:1282 |
| comment | Microsoft Windows Vista x64 Edition is installed | | oval | oval:org.mitre.oval:def:2041 |
| comment | Microsoft Windows Server 2008 (32-bit) is installed | | oval | oval:org.mitre.oval:def:4870 |
| comment | Microsoft Windows Server 2008 (64-bit) is installed | | oval | oval:org.mitre.oval:def:5356 |
| comment | Microsoft Windows Server 2008 (ia-64) is installed | | oval | oval:org.mitre.oval:def:5667 |
| comment | Microsoft Internet Explorer 7 is installed | | oval | oval:org.mitre.oval:def:627 |
| comment | Microsoft Windows XP (32-bit) is installed | | oval | oval:org.mitre.oval:def:1353 |
| comment | Microsoft Windows XP x64 is installed | | oval | oval:org.mitre.oval:def:15247 |
| comment | Microsoft Windows Server 2003 (32-bit) is installed | | oval | oval:org.mitre.oval:def:1870 |
| comment | Microsoft Windows Server 2003 (x64) is installed | | oval | oval:org.mitre.oval:def:730 |
| comment | Microsoft Internet Explorer 8 is installed | | oval | oval:org.mitre.oval:def:6210 |
| comment | Microsoft Windows Vista (32-bit) is installed | | oval | oval:org.mitre.oval:def:1282 |
| comment | Microsoft Windows Vista x64 Edition is installed | | oval | oval:org.mitre.oval:def:2041 |
| comment | Microsoft Windows Server 2008 (32-bit) is installed | | oval | oval:org.mitre.oval:def:4870 |
| comment | Microsoft Windows Server 2008 (64-bit) is installed | | oval | oval:org.mitre.oval:def:5356 |
| comment | Microsoft Internet Explorer 8 is installed | | oval | oval:org.mitre.oval:def:6210 |
| comment | Microsoft Windows 7 (32-bit) is installed | | oval | oval:org.mitre.oval:def:6165 |
| comment | Microsoft Windows 7 x64 Edition is installed | | oval | oval:org.mitre.oval:def:5950 |
| comment | Microsoft Windows Server 2008 R2 x64 Edition is installed | | oval | oval:org.mitre.oval:def:6438 |
| comment | Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed | | oval | oval:org.mitre.oval:def:5954 |
| comment | Microsoft Internet Explorer 8 is installed | | oval | oval:org.mitre.oval:def:6210 |
| | description | Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability." | | family | windows | | id | oval:org.mitre.oval:def:12322 | | status | accepted | | submitted | 2010-10-12T13:00:00 | | title | HTML Element Memory Corruption Vulnerability | | version | 85 |
|
| refmap
via4
|
| cert | TA10-348A | | sectrack | 1024872 |
|
| saint
via4
|
| bid | 45261 | | description | Internet Explorer HTML+TIME element OuterText memory corruption | | id | win_patch_ie_v7 | | osvdb | 69829 | | title | ie_time_outertext | | type | client |
|
| Last major update |
28-02-2022 - 19:22 |
| Published |
16-12-2010 - 19:33 |
| Last modified |
28-02-2022 - 19:22 |
