جزئیات آسیب‌پذیری

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

• http://osvdb.org/62810 vdb-entryx_refsource_OSVDB
• http://www.us-cert.gov/cas/techalerts/TA10-089A.html third-party-advisoryx_refsource_CERT
• http://www.securityfocus.com/bid/38615 vdb-entryx_refsource_BID
• http://www.vupen.com/english/advisories/2010/0567 vdb-entryx_refsource_VUPEN
• http://secunia.com/advisories/38860 third-party-advisoryx_refsource_SECUNIA
• http://www.us-cert.gov/cas/techalerts/TA10-068A.html third-party-advisoryx_refsource_CERT
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 vendor-advisoryx_refsource_MS
• http://www.microsoft.com/technet/security/advisory/981374.mspx x_refsource_CONFIRM
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56772 vdb-entryx_refsource_XF
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446 vdb-entrysignaturex_refsource_OVAL
• http://www.vupen.com/english/advisories/2010/0744 vdb-entryx_refsource_VUPEN
• http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx x_refsource_CONFIRM
• http://www.kb.cert.org/vuls/id/744549 third-party-advisoryx_refsource_CERT-VN
• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 vendor-advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806 government-resource