CVE

Id
46555  
CVE No.
CVE-2010-3971  
Status
Candidate  
Description
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka "CSS Memory Corruption Vulnerability."  
Phase
Assigned (20101014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
508482 46555 CVE-2010-3971 EXPLOIT-DB:15708  View
508483 46555 CVE-2010-3971 URL:http://www.exploit-db.com/exploits/15708  View
508484 46555 CVE-2010-3971 EXPLOIT-DB:15746  View
508485 46555 CVE-2010-3971 URL:http://www.exploit-db.com/exploits/15746  View
508486 46555 CVE-2010-3971 FULLDISC:20101208 IE CSS parser dos bug  View
508487 46555 CVE-2010-3971 URL:http://seclists.org/fulldisclosure/2010/Dec/110  View
508488 46555 CVE-2010-3971 MISC:http://www.breakingpointsystems.com/community/blog/ie-vulnerability/  View
508489 46555 CVE-2010-3971 MISC:http://www.wooyun.org/bugs/wooyun-2010-0885  View
508490 46555 CVE-2010-3971 MISC:http://www.microsoft.com/technet/security/advisory/2488013.mspx  View
508491 46555 CVE-2010-3971 MISC:http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx  View
508492 46555 CVE-2010-3971 CONFIRM:http://support.avaya.com/css/P8/documents/100127294  View
508493 46555 CVE-2010-3971 MS:MS11-003  View
508494 46555 CVE-2010-3971 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-003.mspx  View
508495 46555 CVE-2010-3971 CERT-VN:VU#634956  View
508496 46555 CVE-2010-3971 URL:http://www.kb.cert.org/vuls/id/634956  View
508497 46555 CVE-2010-3971 BID:45246  View
508498 46555 CVE-2010-3971 URL:http://www.securityfocus.com/bid/45246  View
508499 46555 CVE-2010-3971 OVAL:oval:org.mitre.oval:def:12382  View
508500 46555 CVE-2010-3971 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12382  View
508501 46555 CVE-2010-3971 SECTRACK:1024922  View
508502 46555 CVE-2010-3971 URL:http://www.securitytracker.com/id?1024922  View
508503 46555 CVE-2010-3971 SECUNIA:42510  View
508504 46555 CVE-2010-3971 URL:http://secunia.com/advisories/42510  View
508505 46555 CVE-2010-3971 VUPEN:ADV-2010-3156  View
508506 46555 CVE-2010-3971 URL:http://www.vupen.com/english/advisories/2010/3156  View
508507 46555 CVE-2010-3971 VUPEN:ADV-2011-0318  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37491 JVNDB-2010-003276 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、検索パスに関する処理に不備があるため、DLL ハイジャック攻撃を誘導され、任意のコードを実行される脆弱性が存在します。 CVE-2010-3975 46555 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003276.html  View