CVE-2010-0247

Internet Explorer 5.01 SP4, 6, 6 SP1 - Remote Code Execution via Uninitialized Memory Corruption

Title source: llm

Description

Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8506

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/55777

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

Scores

EPSS 0.1850

EPSS Percentile 96.9%

Details

CWE

CWE-94

Status published

Products (18)

microsoft/internet_explorer 6 sp1 (2 CPE variants)

microsoft/internet_explorer 6.0

microsoft/internet_explorer 6.00.2462.0000

microsoft/internet_explorer 6.00.2479.0006

microsoft/internet_explorer 6.0.2600

microsoft/internet_explorer 6.00.2600.0000

microsoft/internet_explorer 6.0.2800

microsoft/internet_explorer 6.0.2800.1106

microsoft/internet_explorer 6.00.2800.1106

microsoft/internet_explorer 6.0.2900

... and 8 more

Published Jan 22, 2010

Tracked Since Feb 18, 2026