Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-1127

Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code, as demonstrated by setting the (1) outerHTML or (2) value property of an object returned by createElement.

Published

2010-03-26T20:30:00.843

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft internet_explorer 6.0 Yes
Application microsoft internet_explorer 6.00.2462.0000 Yes
Application microsoft internet_explorer 6.00.2479.0006 Yes
Application microsoft internet_explorer 6.0.2600 Yes
Application microsoft internet_explorer 6.00.2600.0000 Yes
Application microsoft internet_explorer 6.0.2800 Yes
Application microsoft internet_explorer 6.0.2800.1106 Yes
Application microsoft internet_explorer 6.00.2800.1106 Yes
Application microsoft internet_explorer 6.0.2900 Yes
Application microsoft internet_explorer 6.0.2900.2180 Yes
Application microsoft internet_explorer 6.00.2900.2180 Yes
Application microsoft internet_explorer 6.00.3663.0000 Yes
Application microsoft internet_explorer 6.00.3718.0000 Yes
Application microsoft internet_explorer 6.00.3790.0000 Yes
Application microsoft internet_explorer 6.00.3790.1830 Yes
Application microsoft internet_explorer 6.00.3790.3959 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0.5730 Yes
Application microsoft internet_explorer 7.0.5730.11 Yes
Application microsoft internet_explorer 7.00.5730.1100 Yes
Application microsoft internet_explorer 7.00.6000.16386 Yes
Application microsoft internet_explorer 7.00.6000.16441 Yes
References