CVE-2010-0806Microsoft Internet Explorer Use-After-Free Vulnerability
Aktif olarak istismar ediliyor — Microsoft Internet Explorer Use-After-Free Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 20.05.2026 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 03.06.2026.
Gerekli işlem: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0806
Açıklama
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| microsoft | internet explorer | 5.01 |
Kaynaklar ve yamalar
- 62810 vdb-entryBroken Link
- TA10-089A third-party-advisoryUS Government Resource
- 38615 vdb-entryBroken Link
- ADV-2010-0567 vdb-entryVendor Advisory
- 38860 third-party-advisoryVendor Advisory
- TA10-068A third-party-advisoryUS Government Resource
- MS10-018 vendor-advisoryVendor Advisory
- http://www.microsoft.com/technet/security/advisory/981374.mspx Broken LinkPatchVendor Advisory
- ms-ie-useafterfree-code-execution(56772) vdb-entryThird Party AdvisoryVDB Entry
- oval:org.mitre.oval:def:8446 vdb-entrysignatureBroken Link
- ADV-2010-0744 vdb-entryVendor Advisory
- http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx Broken Link
- VU#744549 third-party-advisoryPatchUS Government Resource
- https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806 US Government Resource
CPE eşleşmeleri (NVD) (5)
cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*