CVE-2010-0255

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 - Unauthenticated Arbitrary File Read via Dynamic OBJECT Tag

Title source: llm
STIX 2.1

Description

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to a file://127.0.0.1 URL, aka the dynamic OBJECT tag vulnerability, as demonstrated by obtaining the data from an index.dat file, a variant of CVE-2009-1140 and related to CVE-2008-1448.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/509345/100/0/threaded
Vendor Advisory x_refsource_confirm
http://support.avaya.com/css/P8/documents/100089747
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/62156
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38055
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
Various Sources x_refsource_misc
http://isc.sans.org/diary.html?n&storyid=8152
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7145
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38056

Scores

EPSS 0.3703
EPSS Percentile 98.4%

Details

CWE
CWE-264
Status published
Products (4)
microsoft/internet_explorer 6 (2 CPE variants)
microsoft/internet_explorer 7
microsoft/internet_explorer 5.01 sp4
microsoft/internet_explorer 8
Published Feb 04, 2010
Tracked Since Feb 18, 2026