CVE-2010-0244

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 - Remote Code Execution via Uninitialized Memory Corruption

Title source: llm
STIX 2.1

Description

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-2530 and CVE-2009-2531.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8186
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/55774

Scores

EPSS 0.2076
EPSS Percentile 97.2%

Details

CWE
CWE-94
Status published
Products (26)
microsoft/internet_explorer 8
microsoft/internet_explorer 8.0.6001
microsoft/internet_explorer 7
microsoft/internet_explorer 7.0
microsoft/internet_explorer 7.0.5730 unknown
microsoft/internet_explorer 7.0.5730.11
microsoft/internet_explorer 7.00.5730.1100
microsoft/internet_explorer 7.00.6000.16386
microsoft/internet_explorer 7.00.6000.16441
microsoft/internet_explorer 6 sp1 (2 CPE variants)
... and 16 more
Published Jan 22, 2010
Tracked Since Feb 18, 2026