CVE-2010-3346 in Internet Explorer

Riassunto

di MITRE

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 14/09/2010
• Divulgazione: 16/12/2010
• Moderazione: accettato
• Voce: VDB-55756
• CPE: pronto
• CWE: CWE-94 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.3 (NVD)
• EPSS: 0.28886
• KEV: no
• Attività: molto basso
• Settore: Police, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-3346
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-3346
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-3346/