CVE-2010-0246

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0245.
Code Injection
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
microsoftinternet_explorer
8.0.6001
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
https://exchange.xforce.ibmcloud.com/vulnerabilities/55776
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8378
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
https://exchange.xforce.ibmcloud.com/vulnerabilities/55776
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8378