CVE-2010-1127: Null Pointer Dereference
First published: Fri Mar 26 2010(Updated: )
Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code, as demonstrated by setting the (1) outerHTML or (2) value property of an object returned by createElement.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =6.0.2600 | |
| Internet Explorer | =6.00.2462.0000 | |
| Internet Explorer | =6.00.2479.0006 | |
| Internet Explorer | =6.0 | |
| Internet Explorer | =6.0.2800 | |
| Internet Explorer | =6.0.2800.1106 | |
| Internet Explorer | =6.0.2900 | |
| Internet Explorer | =6.00.2600.0000 | |
| Internet Explorer | =6.00.2800.1106 | |
| Internet Explorer | =6.0.2900.2180 | |
| Internet Explorer | =7.0.5730-unknown | |
| Internet Explorer | =7.0-beta | |
| Internet Explorer | =7.0 | |
| Internet Explorer | =7.0.5730.11 | |
| Internet Explorer | =6.00.2900.2180 | |
| Internet Explorer | =6.00.3663.0000 | |
| Internet Explorer | =6.00.3718.0000 | |
| Internet Explorer | =6.00.3790.0000 | |
| Internet Explorer | =6.00.3790.1830 | |
| Internet Explorer | =6.00.3790.3959 | |
| Internet Explorer | =7.0-beta1 | |
| Internet Explorer | =7.0-beta2 | |
| Internet Explorer | =7.0-beta3 | |
| Internet Explorer | =7.00.5730.1100 | |
| Internet Explorer | =7.00.6000.16386 | |
| Internet Explorer | =7.00.6000.16441 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-1127?
CVE-2010-1127 has been classified as a denial of service vulnerability affecting Microsoft Internet Explorer 6 and 7.
How do I fix CVE-2010-1127?
To address CVE-2010-1127, users should upgrade to a more recent and secure version of Microsoft Internet Explorer or apply any relevant patches.
What does CVE-2010-1127 allow attackers to do?
CVE-2010-1127 allows remote attackers to cause a denial of service through a null pointer dereference leading to an application crash when using crafted JavaScript.
Which versions of Internet Explorer are affected by CVE-2010-1127?
CVE-2010-1127 affects Microsoft Internet Explorer versions 6 and 7.
What is the impact of CVE-2010-1127 on users?
The impact of CVE-2010-1127 on users is that it can result in unexpected application crashes when a malicious script is executed.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/6.0.2600
- version/internet explorer/6.00.2462.0000
- version/internet explorer/6.00.2479.0006
- version/internet explorer/6.0
- version/internet explorer/6.0.2800
- version/internet explorer/6.0.2800.1106
- version/internet explorer/6.0.2900
- version/internet explorer/6.00.2600.0000
- version/internet explorer/6.00.2800.1106
- version/internet explorer/6.0.2900.2180
- version/internet explorer/7.0.5730-unknown
- version/internet explorer/7.0-beta
- version/internet explorer/7.0
- version/internet explorer/7.0.5730.11
- version/internet explorer/6.00.2900.2180
- version/internet explorer/6.00.3663.0000
- version/internet explorer/6.00.3718.0000
- version/internet explorer/6.00.3790.0000
- version/internet explorer/6.00.3790.1830
- version/internet explorer/6.00.3790.3959
- version/internet explorer/7.0-beta1
- version/internet explorer/7.0-beta2
- version/internet explorer/7.0-beta3
- version/internet explorer/7.00.5730.1100
- version/internet explorer/7.00.6000.16386
- version/internet explorer/7.00.6000.16441