Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3962

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.

Published

2010-11-05T17:00:02.890

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	microsoft	internet_explorer	6	Yes
Operating System	microsoft	windows_server_2003	-	No
Operating System	microsoft	windows_xp	-	No
Operating System	microsoft	windows_xp	-	No
Application	microsoft	internet_explorer	7	Yes
Operating System	microsoft	windows_server_2003	-	No
Operating System	microsoft	windows_server_2008	-	No
Operating System	microsoft	windows_server_2008	-	No
Operating System	microsoft	windows_vista	-	No
Operating System	microsoft	windows_vista	-	No
Operating System	microsoft	windows_xp	-	No
Operating System	microsoft	windows_xp	-	No
Application	microsoft	internet_explorer	8	Yes
Operating System	microsoft	windows_7	-	No
Operating System	microsoft	windows_server_2003	-	No
Operating System	microsoft	windows_server_2008	-	No
Operating System	microsoft	windows_server_2008	-	No
Operating System	microsoft	windows_server_2008	r2	No
Operating System	microsoft	windows_vista	-	No
Operating System	microsoft	windows_vista	-	No
Operating System	microsoft	windows_xp	-	No
Operating System	microsoft	windows_xp	-	No

References

http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx Vendor Advisory ([email protected])
http://secunia.com/advisories/42091 Broken Link, Vendor Advisory ([email protected])
http://www.exploit-db.com/exploits/15418 Third Party Advisory, VDB Entry ([email protected])
http://www.exploit-db.com/exploits/15421 Third Party Advisory, VDB Entry ([email protected])
http://www.kb.cert.org/vuls/id/899748 Third Party Advisory, US Government Resource ([email protected])
http://www.microsoft.com/technet/security/advisory/2458511.mspx Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/44536 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1024676 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.symantec.com/connect/blogs/new-ie-0-day-used-targeted-attacks Not Applicable ([email protected])
http://www.us-cert.gov/cas/techalerts/TA10-348A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vupen.com/english/advisories/2010/2880 Broken Link, Vendor Advisory ([email protected])
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 Patch, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/62962 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12279 Tool Signature ([email protected])
http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/42091 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/15418 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/15421 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/899748 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.microsoft.com/technet/security/advisory/2458511.mspx Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/44536 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1024676 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/connect/blogs/new-ie-0-day-used-targeted-attacks Not Applicable (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA10-348A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2010/2880 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/62962 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12279 Tool Signature (af854a3a-2127-422b-91ae-364da2661108)