NVD

Id
12795  
Name
CVE-2010-1263  
Description
Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during instantiation, which allows remote attackers to execute arbitrary code via a crafted file, aka "COM Validation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-06-08  
Modified Date
2011-10-04  
Seq
2010-1263  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70492 12795 CVE-2010-1263 oval:org.mitre.oval:def:7286  View
70493 12795 CVE-2010-1263 MS10-036  View
70494 12795 CVE-2010-1263 MS10-083  View
70495 12795 CVE-2010-1263 40574  View
70496 12795 CVE-2010-1263 1024555  View
70497 12795 CVE-2010-1263 TA10-159B  View
70498 12795 CVE-2010-1263 TA10-285A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35816 JVNDB-2010-001596 複数の Microsoft 製品における任意のコードを実行される脆弱性 複数の Microsoft 製品には、COM オブジェクトのインスタンス化に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-1263 43843 CVE-2010-1263 12795 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001596.html 2010-06-08 2010-10-25 View