CVE-2010-0492

Description

Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka HTML Object Memory Corruption Vulnerability.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
62.849

Associated Vulnerability

VulnerabilityOS Platform
Cumulative Security Update for Internet Explorer 5.01 Service Pack 4 (KB980182)Windows
Update for Internet Explorer 6 SP1 (KB980182)Windows
Cumulative Security Update for Internet Explorer for Windows XP (KB980182) x86 based systemsWindows
Cumulative Security Update for Internet Explorer for Windows XP (KB980182) x86 based systems for SP3Windows
Cumulative Security Update for Internet Explorer for Windows Server 2003 (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 for Windows XP (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB980182) x86 based systemsWindows
Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB980182) x86 based systems for SP1Windows
Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB980182) x86 based systems for SP2Windows
Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 (KB980182) x86 based systemsWindows
Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 for Windows XP x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB980182) for SP1Windows
Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB980182) for SP2Windows
Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB980182) for SP2Windows
Cumulative Security Update for Internet Explorer 8 for Windows XP (KB980182) x86 based systemsWindows
Cumulative Security Update for Internet Explorer 8 for Windows XP (KB980182) x86 based systems for SP3Windows
Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB980182)Windows
Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB980182) x86 based systemsWindows
Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB980182) x86 based systems for SP1Windows
Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB980182) x86 based systems for SP2Windows
Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB980182) x86 based systemsWindows
Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB980182) x86 based systems for SP2Windows
Cumulative Security Update for Internet Explorer 8 in Windows 7 (KB980182)Windows
Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB980182) for SP1Windows
Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB980182) for SP2Windows
Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB980182) for SP2Windows
Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB980182)Windows
Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB980182)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-8246Cumulative Security Update for Internet Explorer for Windows XP (KB980182)
PATCH-8247Cumulative Security Update for Internet Explorer for Windows Server 2003 (KB980182)
PATCH-8252Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB980182)
PATCH-8254Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB980182)
PATCH-8256Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 (KB980182)
PATCH-8258Cumulative Security Update for Internet Explorer 7 for Windows XP x64 Edition (KB980182)
PATCH-8262Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB980182)
PATCH-8263Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB980182)
PATCH-8264Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB980182)
PATCH-8265Cumulative Security Update for Internet Explorer 8 for Windows XP (KB980182)
PATCH-8266Cumulative Security Update for Internet Explorer 8 for Windows XP (KB980182)
PATCH-8267Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB980182)
PATCH-8269Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB980182)
PATCH-8270Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB980182)
PATCH-8271Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB980182)
PATCH-8272Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB980182)
PATCH-8273Cumulative Security Update for Internet Explorer 8 in Windows 7 (KB980182)
PATCH-8274Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB980182)
PATCH-8275Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB980182)
PATCH-8277Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB980182)
PATCH-8278Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB980182)
PATCH-8279Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB980182)
PATCH-8280Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB980182)
PATCH-8281Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB980182)
PATCH-8282Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB980182)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234