CVE-2010-0249

high-risk
Published 2010-01-15

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability."

Do I need to act?

!
90.1% chance of exploitation in next 30 days
EPSS score — higher than 10% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
2 public exploits available
16599, 11167
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (5)

Affected Vendors

Microsoft

References (28)

Broken Link http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx
Broken Link http://news.cnet.com/8301-27080_3-10435232-245.html
Broken Link http://osvdb.org/61697
Broken Link http://securitytracker.com/id?1023462
Patch http://support.microsoft.com/kb/979352
Exploit http://www.exploit-db.com/exploits/11167
Third Party Advisory http://www.kb.cert.org/vuls/id/492515
Broken Link http://www.microsoft.com/technet/security/advisory/979352.mspx
Broken Link http://www.securityfocus.com/bid/37815
Broken Link http://www.us-cert.gov/cas/techalerts/TA10-055A.html
Broken Link http://www.vupen.com/english/advisories/2010/0135
Patch https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-00...
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/55642
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Broken Link http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx
Broken Link http://news.cnet.com/8301-27080_3-10435232-245.html
Broken Link http://osvdb.org/61697
Broken Link http://securitytracker.com/id?1023462
Patch http://support.microsoft.com/kb/979352
Exploit http://www.exploit-db.com/exploits/11167
and 8 more references
69
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 27/34 · High
Exposure 12/34 · Low