NVD

Id
11820  
Name
CVE-2010-0249  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-01-15  
Modified Date
2013-07-13  
Seq
2010-0249  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
65109 11820 CVE-2010-0249 http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx  View
65110 11820 CVE-2010-0249 http://news.cnet.com/8301-27080_3-10435232-245.html  View
65111 11820 CVE-2010-0249 oval:org.mitre.oval:def:6835  View
65112 11820 CVE-2010-0249 1023462  View
65113 11820 CVE-2010-0249 979352  View
65114 11820 CVE-2010-0249 11167  View
65115 11820 CVE-2010-0249 VU#492515  View
65116 11820 CVE-2010-0249 http://www.microsoft.com/technet/security/advisory/979352.mspx  View
65117 11820 CVE-2010-0249 MS10-002  View
65118 11820 CVE-2010-0249 37815  View
65119 11820 CVE-2010-0249 TA10-055A  View
65120 11820 CVE-2010-0249 ADV-2010-0135  View
65121 11820 CVE-2010-0249 ie-freed-object-code-execution(55642)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35278 JVNDB-2010-001058 Microsoft Internet Explorer において任意のコードが実行される脆弱性 Microsoft Internet Explorer には、任意のコードが実行される脆弱性があります。 CVE-2010-0249 42829 CVE-2010-0249 11820 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001058.html 2010-01-15 2010-02-19 View