Russian Vulnerability Scanner Database

Back to List

CVE-2010-0249

Scores

EPSS

0.901high90.1%
0%20%40%60%80%100%

Percentile: 90.1%

CVSS

8.8high3.x
0246810

CVSS Score: 8.8/10

All CVSS Scores

CVSS 3.x
8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0
9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka “HTML Object Memory Corruption Vulnerability.”

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-416

Exploits

Exploit ID: 11167

Source: exploitdb

URL: https://www.exploit-db.com/exploits/11167

Exploit ID: 16599

Source: exploitdb

URL: https://www.exploit-db.com/exploits/16599

Recommendations

Source: nvd

Apply an updateMicrosoft has released an update to address the issue. See Microsoft Security Bulletin MS10-002 for more information. Users are encouraged to consider additional mitigations listed in Microsoft Security Advisory 979352:Enable Data Execution Prevention (DEP) on Internet Explorer 6 or Internet Explorer 7Microsoft has published more information on DEP as a mitigation for this vulnerability. DEP should not be treated as a complete workaround, but DEP can mitigate the execution of attacker-supplied code in some cases. Microsoft has published detailed technical information about DEP in Security Research & Defense blog posts “Understanding DEP as a mitigation technology” part 1 and part 2. Use of DEP should be considered in conjunction with other mitigations described in this document.Set the Internet zone security setting to “High”Setting the Internet zone security setting to “High” will result in the user being prompted before running ActiveX controls and Active Scripting, which may reduce the risk of certain attack vectors.Disable Active ScriptingDisabling Active Scripting will prevent Active Scripting from running, which may reduce the risk of certain attack vectors.Disable ActiveX Controls in Microsoft OfficeThis vulnerability can be exploited through a Microsoft Office document containing an ActiveX control. Disabling ActiveX controls in Microsoft Office blocks this attack vector. For detailed instructions on how to disable ActiveX in Microsoft Office, see the “Workarounds” section of Microsoft Security Advisory 979352 and the “Enable or disable ActiveX controls in Office documents” Microsoft Office Online article.

URL: http://www.kb.cert.org/vuls/id/492515

Vulnerable Software (4)

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait: 
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*",          "vulnerable": true        },        {          ...

Source: nvd

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait: 
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:6:-:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": ...

Source: nvd

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait: 
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator"...

Source: nvd

Type: Configuration

Vendor: *

Product: internet_explorer

Operating System: * * *

Trait: 
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",          "vulnerable": true        }      ],      "operator": ...

Source: nvd

End of list