CVE-2010-0492

Description

Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

Reserved 2010-02-02 | Published 2010-03-31 | Updated 2024-10-21 | Assigner microsoft

References

oval.cisecurity.org/...finition/oval:org.mitre.oval:def:7722 (oval:org.mitre.oval:def:7722) vdb-entry signature

www.us-cert.gov/cas/techalerts/TA10-089A.html (TA10-089A) third-party-advisory

www.zerodayinitiative.com/advisories/ZDI-10-033

www.us-cert.gov/cas/techalerts/TA10-068A.html (TA10-068A) third-party-advisory

docs.microsoft.com/...pdates/securitybulletins/2010/ms10-018 (MS10-018) vendor-advisory

www.securityfocus.com/archive/1/510506/100/0/threaded (20100402 ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability) mailing-list

www.securityfocus.com/bid/39030 (39030) vdb-entry

www.vupen.com/english/advisories/2010/0744 (ADV-2010-0744) vdb-entry

securitytracker.com/id?1023773 (1023773) vdb-entry

cve.org (CVE-2010-0492)

nvd.nist.gov (CVE-2010-0492)

Download JSON