CVE-2010-2746: Buffer Overflow
Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, when a third-party SVG viewer is used, allows remote attackers to execute arbitrary code via a crafted HTML document that triggers unspecified messages from this viewer, aka "Comctl32 Heap Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2746?
CVE-2010-2746 is classified as a critical vulnerability that can allow remote code execution.
How do I fix CVE-2010-2746?
To fix CVE-2010-2746, update your Microsoft Windows operating system to the latest security patches provided by Microsoft.
Which operating systems are affected by CVE-2010-2746?
CVE-2010-2746 affects Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008, and Windows 7.
What type of vulnerability is CVE-2010-2746?
CVE-2010-2746 is a heap-based buffer overflow vulnerability that can be triggered by a third-party SVG viewer.
Can CVE-2010-2746 be exploited remotely?
Yes, CVE-2010-2746 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable systems.