Back to CVE Browser

CVE-2010-0806

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score95.9310%

EPSS Percentile85.48th

PublishedMar 10, 2010

Last ModifiedMay 21, 2026

Vulnerability Description

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

Affected Platforms (CPE)

📦

Microsoft

Internet Explorer

= 5.01

📦

Microsoft

Internet Explorer

= 6

📦

Microsoft

Internet Explorer

= 8

📦

Microsoft

Internet Explorer

= 7

📦

Microsoft

Internet Explorer

= 6

References & Advisories

🔗 http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx

🔗 http://osvdb.org/62810

🔗 http://secunia.com/advisories/38860

🔗 http://www.kb.cert.org/vuls/id/744549

🔗 http://www.microsoft.com/technet/security/advisory/981374.mspx

🔗 http://www.securityfocus.com/bid/38615

🔗 http://www.us-cert.gov/cas/techalerts/TA10-068A.html

🔗 http://www.us-cert.gov/cas/techalerts/TA10-089A.html

Related Vulnerabilities

CVE-1999-046510.0

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

CVE-1999-034710.0

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javasc...

CVE-1999-096710.0

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource p...

CVE-1999-124110.0

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web...