First published: Fri Jan 22 2010(Updated: )
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."
Credit: secure@microsoft.com secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Any of | ||
Internet Explorer | =8 | |
Internet Explorer | =8.0.6001 | |
Any of | ||
Microsoft Windows 7 | ||
Microsoft Windows Server 2003 | =sp2 | |
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | =r2 | |
Microsoft Windows Server 2008 Itanium | =r2 | |
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Vista | ||
Microsoft Windows Vista | ||
Microsoft Windows Vista | =sp1 | |
Microsoft Windows Vista | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp3 | |
Microsoft Windows XP | =sp2 | |
All of | ||
Any of | ||
Internet Explorer | =7 | |
Internet Explorer | =7.0 | |
Internet Explorer | =7.0.5730-unknown | |
Internet Explorer | =7.0.5730.11 | |
Internet Explorer | =7.00.5730.1100 | |
Internet Explorer | =7.00.6000.16386 | |
Internet Explorer | =7.00.6000.16441 | |
Any of | ||
Microsoft Windows Server 2003 | =sp2 | |
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Vista | ||
Microsoft Windows Vista | ||
Microsoft Windows Vista | =sp1 | |
Microsoft Windows Vista | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp3 | |
Microsoft Windows XP | =sp2 | |
All of | ||
Internet Explorer | =6-sp1 | |
Microsoft Windows 2000 | =sp4 | |
All of | ||
Any of | ||
Internet Explorer | =6 | |
Internet Explorer | =6.0 | |
Internet Explorer | =6.00.2462.0000 | |
Internet Explorer | =6.00.2479.0006 | |
Internet Explorer | =6.0.2600 | |
Internet Explorer | =6.00.2600.0000 | |
Internet Explorer | =6.0.2800 | |
Internet Explorer | =6.0.2800.1106 | |
Internet Explorer | =6.00.2800.1106 | |
Internet Explorer | =6.0.2900 | |
Internet Explorer | =6.0.2900.2180 | |
Internet Explorer | =6.00.2900.2180 | |
Internet Explorer | =6.00.3663.0000 | |
Internet Explorer | =6.00.3718.0000 | |
Internet Explorer | =6.00.3790.0000 | |
Internet Explorer | =6.00.3790.1830 | |
Internet Explorer | =6.00.3790.3959 | |
Any of | ||
Microsoft Windows Server 2003 | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp3 | |
Microsoft Windows XP | =sp2 | |
Internet Explorer | =8 | |
Internet Explorer | =8.0.6001 | |
Microsoft Windows 7 | ||
Microsoft Windows Server 2003 | =sp2 | |
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | =r2 | |
Microsoft Windows Server 2008 Itanium | =r2 | |
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Vista | ||
Microsoft Windows Vista | ||
Microsoft Windows Vista | =sp1 | |
Microsoft Windows Vista | =sp1 | |
Microsoft Windows Vista | =sp2 | |
Microsoft Windows Vista | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp3 | |
Microsoft Windows XP | =sp2 | |
Internet Explorer | =7 | |
Internet Explorer | =7.0 | |
Internet Explorer | =7.0.5730-unknown | |
Internet Explorer | =7.0.5730.11 | |
Internet Explorer | =7.00.5730.1100 | |
Internet Explorer | =7.00.6000.16386 | |
Internet Explorer | =7.00.6000.16441 | |
Internet Explorer | =6-sp1 | |
Microsoft Windows 2000 | =sp4 | |
Internet Explorer | =6 | |
Internet Explorer | =6.0 | |
Internet Explorer | =6.00.2462.0000 | |
Internet Explorer | =6.00.2479.0006 | |
Internet Explorer | =6.0.2600 | |
Internet Explorer | =6.00.2600.0000 | |
Internet Explorer | =6.0.2800 | |
Internet Explorer | =6.0.2800.1106 | |
Internet Explorer | =6.00.2800.1106 | |
Internet Explorer | =6.0.2900 | |
Internet Explorer | =6.0.2900.2180 | |
Internet Explorer | =6.00.2900.2180 | |
Internet Explorer | =6.00.3663.0000 | |
Internet Explorer | =6.00.3718.0000 | |
Internet Explorer | =6.00.3790.0000 | |
Internet Explorer | =6.00.3790.1830 | |
Internet Explorer | =6.00.3790.3959 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0248 has a critical severity rating due to potential remote code execution.
To fix CVE-2010-0248, update Microsoft Internet Explorer to the latest version provided by Microsoft.
CVE-2010-0248 affects Internet Explorer versions 6, 7, and 8, including their service packs.
Yes, CVE-2010-0248 can be exploited remotely by attackers to execute arbitrary code.
Ignoring CVE-2010-0248 could lead to severe security breaches, including unauthorized access and complete system compromise.