CVE-2010-1261: Code Injection
First published: Tue Jun 08 2010(Updated: )
The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =8 | |
| Microsoft Windows Server 2003 | =sp2 | |
| Microsoft Windows Server 2003 | =sp2 | |
| Microsoft Windows 7 | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp2 | |
| Microsoft Windows Vista | =sp2 | |
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp2 | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows XP | =sp3 | |
| Microsoft Windows XP | =sp2 | |
| All of | ||
| =8 | ||
| Any of | ||
| =sp2 | ||
| =sp2 | ||
| =sp2 | ||
| =sp2 | ||
| =r2 | ||
| =r2 | ||
| =sp1 | ||
| =sp2 | ||
| =sp1 | ||
| =sp2 | ||
| =sp2 | ||
| =sp3 | ||
| =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-1261?
CVE-2010-1261 has a high severity rating due to its potential to allow remote code execution through memory corruption.
How do I fix CVE-2010-1261?
To fix CVE-2010-1261, you should apply the latest security updates from Microsoft for Internet Explorer 8.
What versions of Internet Explorer are affected by CVE-2010-1261?
CVE-2010-1261 affects Microsoft Internet Explorer 8 on various supported versions of Windows.
Can CVE-2010-1261 be exploited without user interaction?
CVE-2010-1261 requires user-assisted actions to exploit the vulnerability effectively.
What are the risks associated with CVE-2010-1261?
The risk of CVE-2010-1261 includes unauthorized access and control over affected systems, leading to data theft or further compromise.
- collector/nvd-historical
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/author
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/8
- canonical/microsoft windows server 2003
- version/microsoft windows server 2003/sp2
- canonical/microsoft windows 7
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows server/r2
- canonical/microsoft windows vista
- version/microsoft windows vista/sp1
- version/microsoft windows vista/sp2
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- version/microsoft windows xp/sp3