CVE-2010-0490

EUVD-2010-0521
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_2003_server
*
microsoftwindows_server_2003
*
microsoftwindows_xp
*
microsoftwindows_xp
*
microsoftwindows_xp
-
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
-
microsoftwindows_server_2008
-
microsoftwindows_vista
*
microsoftwindows_vista
*
microsoftwindows_vista
*
microsoftwindows_vista
*
microsoftwindows_vista
-
microsoftwindows_vista
-
microsoftwindows_server_2003
*
microsoftwindows_xp
*
microsoftwindows_xp
*
microsoftwindows_xp
-
microsoftinternet_explorer
8.0.6001
microsoftwindows_2003_server
*
microsoftwindows_2003_server
*
microsoftwindows_7
-
microsoftwindows_server_2003
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
microsoftwindows_vista
*
microsoftwindows_vista
*
microsoftwindows_vista
*
microsoftwindows_vista
*
microsoftwindows_vista
-
microsoftwindows_vista
-
microsoftwindows_xp
*
microsoftwindows_xp
*
microsoftwindows_xp
-
𝑥
= Vulnerable software versions