返回 CVE 浏览器

CVE-2010-0806

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score95.9310%

EPSS Percentile85.48th

Published2010年3月10日

Last Modified2026年5月21日

Vulnerability Description

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

Affected Platforms (CPE)

📦

Microsoft

Internet Explorer

= 5.01

📦

Microsoft

Internet Explorer

= 6

📦

Microsoft

Internet Explorer

= 8

📦

Microsoft

Internet Explorer

= 7

📦

Microsoft

Internet Explorer

= 6

References & Advisories

🔗 http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx

🔗 http://osvdb.org/62810

🔗 http://secunia.com/advisories/38860

🔗 http://www.kb.cert.org/vuls/id/744549

🔗 http://www.microsoft.com/technet/security/advisory/981374.mspx

🔗 http://www.securityfocus.com/bid/38615

🔗 http://www.us-cert.gov/cas/techalerts/TA10-068A.html

🔗 http://www.us-cert.gov/cas/techalerts/TA10-089A.html

相关漏洞威胁

CVE-1999-046510.0

Remote attackers can crash Lynx and Internet Explorer using an IMG tag with a large width parameter.

CVE-1999-034710.0

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javasc...

CVE-1999-096710.0

Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource p...

CVE-1999-124110.0

Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web...