CVE-2010-3329

mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory, aka "Uninitialized Memory Corruption Vulnerability."
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
microsoftCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
Common Weakness Enumeration
References
http://support.avaya.com/css/P8/documents/100113324
http://www.securityfocus.com/bid/43706
http://www.us-cert.gov/cas/techalerts/TA10-285A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7482
http://support.avaya.com/css/P8/documents/100113324
http://www.securityfocus.com/bid/43706
http://www.us-cert.gov/cas/techalerts/TA10-285A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7482