NVD

Id
15299  
Name
CVE-2010-3971  
Description
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka "CSS Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-22  
Modified Date
2011-07-18  
Seq
2010-3971  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86169 15299 CVE-2010-3971 http://blogs.technet.com/b/srd/archive/2011/01/07/assessing-the-risk-of-public-issues-currently-being-tracked-by-the-msrc.aspx  View
86170 15299 CVE-2010-3971 oval:org.mitre.oval:def:12382  View
86171 15299 CVE-2010-3971 20101208 IE CSS parser dos bug  View
86172 15299 CVE-2010-3971 http://support.avaya.com/css/P8/documents/100127294  View
86173 15299 CVE-2010-3971 http://www.breakingpointsystems.com/community/blog/ie-vulnerability/  View
86174 15299 CVE-2010-3971 15708  View
86175 15299 CVE-2010-3971 15746  View
86176 15299 CVE-2010-3971 VU#634956  View
86177 15299 CVE-2010-3971 http://www.microsoft.com/technet/security/advisory/2488013.mspx  View
86178 15299 CVE-2010-3971 MS11-003  View
86179 15299 CVE-2010-3971 45246  View
86180 15299 CVE-2010-3971 1024922  View
86181 15299 CVE-2010-3971 ADV-2010-3156  View
86182 15299 CVE-2010-3971 ADV-2011-0318  View
86183 15299 CVE-2010-3971 http://www.wooyun.org/bugs/wooyun-2010-0885  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36873 JVNDB-2010-002653 Microsoft Internet Explorer に任意のコードが実行される脆弱性 Microsoft Internet Explorer には、CSS (Cascading Style Sheets) の処理に起因する解放済みメモリを使用の (use-after-free) 脆弱性が存在します。 CVE-2010-3971 46551 CVE-2010-3971 15299 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002653.html 2010-12-14 2011-03-28 View