CVE

Id
45912  
CVE No.
CVE-2010-3328  
Status
Candidate  
Description
Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object, aka "Uninitialized Memory Corruption Vulnerability."  
Phase
Assigned (20100914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
499637 45912 CVE-2010-3328 MISC:http://www.zerodayinitiative.com/advisories/ZDI-10-197/  View
499638 45912 CVE-2010-3328 CONFIRM:http://support.avaya.com/css/P8/documents/100113324  View
499639 45912 CVE-2010-3328 MS:MS10-071  View
499640 45912 CVE-2010-3328 URL:http://www.microsoft.com/technet/security/Bulletin/MS10-071.mspx  View
499641 45912 CVE-2010-3328 CERT:TA10-285A  View
499642 45912 CVE-2010-3328 URL:http://www.us-cert.gov/cas/techalerts/TA10-285A.html  View
499643 45912 CVE-2010-3328 BID:43705  View
499644 45912 CVE-2010-3328 URL:http://www.securityfocus.com/bid/43705  View
499645 45912 CVE-2010-3328 OVAL:oval:org.mitre.oval:def:7059  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36335 JVNDB-2010-002115 Microsoft .NET Framework における View State フォームデータを復号または変更される脆弱性 Microsoft .NET Framework は、復号化を実行中に詳細なエラーコードを提供してしまうため、暗号化した View State フォームデータを復号または変更され、cookies を偽装されたり、アプリケーションファイルを読まれる脆弱性が存在します。 CVE-2010-3332 45912 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002115.html  View