First published: Thu Dec 16 2010(Updated: )
Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =6 | |
Microsoft Windows Server 2003 | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp3 | |
Internet Explorer | =7 | |
Microsoft Windows Server 2008 Itanium | ||
Microsoft Windows Server 2008 Itanium | =sp2 | |
Microsoft Windows Vista | =sp1 | |
Microsoft Windows Vista | =sp2 | |
Microsoft Windows XP | =sp2 | |
Internet Explorer | =8 | |
Microsoft Windows 7 | ||
Microsoft Windows Server 2008 Itanium | =r2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3346 is classified as a critical vulnerability that allows remote code execution.
To remediate CVE-2010-3346, users should upgrade to a later version of Internet Explorer or apply the relevant security patches provided by Microsoft.
CVE-2010-3346 affects Internet Explorer versions 6, 7, and 8.
Yes, CVE-2010-3346 can be exploited by attackers through specially crafted web pages.
CVE-2010-3346 allows attackers to execute arbitrary code on the victim's machine, potentially taking full control.