CVE-2010-0248

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing…

High · published January 22, 2010

Patch now

High probability of exploitation

CVSS calls it high at 8.1. It sits in the 99.0th percentile for exploit probability.

CVSS v3.1

8.1

EPSS

53%

Percentile

99.0

In the wild

Unconfirmed

What it is

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.53085 · 99.0th percentile
Published: 2010-01-22T21:20Z

EPSS history

Timeline

22 JAN 21:20Z
Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing…
cvelistv5