Vulnerability Details CVE-2010-0248
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.802
EPSS Ranking 99.1%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 9.3
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55778
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55778
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267
Products affected by CVE-2010-0248
-
cpe:2.3:a:microsoft:internet_explorer:6
-
cpe:2.3:a:microsoft:internet_explorer:6.0
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2600
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2800
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2900
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3718.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959
-
cpe:2.3:a:microsoft:internet_explorer:7
-
cpe:2.3:a:microsoft:internet_explorer:7.0
-
cpe:2.3:a:microsoft:internet_explorer:7.0.5730
-
cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11
-
cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100
-
cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386
-
cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441
-
cpe:2.3:a:microsoft:internet_explorer:8
-
cpe:2.3:a:microsoft:internet_explorer:8.0.6001
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_7:-
-
cpe:2.3:o:microsoft:windows_server_2003:-
-
cpe:2.3:o:microsoft:windows_server_2003:r2
-
cpe:2.3:o:microsoft:windows_server_2008:-
-
cpe:2.3:o:microsoft:windows_server_2008:r2
-
cpe:2.3:o:microsoft:windows_vista:-
-
cpe:2.3:o:microsoft:windows_xp:-
-
cpe:2.3:o:microsoft:windows_xp:unknown