NVD

Id
12105  
Name
CVE-2010-0555  
Description
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product"s use of text/html as the default content type for files that are encountered after a redirection, aka the URLMON sniffing vulnerability, a variant of CVE-2009-1140 and related to CVE-2008-1448.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-02-04  
Modified Date
2010-03-26  
Seq
2010-0555  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66707 12105 CVE-2010-0555 http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx  View
66708 12105 CVE-2010-0555 http://isc.sans.org/diary.html?n&storyid=8152  View
66709 12105 CVE-2010-0555 http://www.coresecurity.com/content/internet-explorer-dynamic-object-tag  View
66710 12105 CVE-2010-0555 http://www.microsoft.com/technet/security/advisory/980088.mspx  View
66711 12105 CVE-2010-0555 20100203 CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities  View
66712 12105 CVE-2010-0555 38055  View
66713 12105 CVE-2010-0555 38056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38703 JVNDB-2010-004488 Microsoft Internet Explorer 5 から 8 における制限を回避される脆弱性 Microsoft Internet Explorer 5 から 8 は、HTML 文書として非 HTML ローカルファイルのレンダリングを制限しないため、制限を回避される、および任意のファイルを読まれる脆弱性が存在します。 CVE-2010-0555 43135 CVE-2010-0555 12105 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004488.html 2010-02-03 2012-09-25 View