CVE-2010-0489

Published Mar 31, 2010

Last updated a year ago

Overview

Description
Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Race Condition Memory Corruption Vulnerability."
Source
secure@microsoft.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
9.3
Impact score
10
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-362

Evaluator

Comment
-
Impact
Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx 'Internet Explorer 8 is not affected by this vulnerability.'
Solution
Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx 'Internet Explorer 8 is not affected by this vulnerability.'

Configurations