CVE-2010-0806
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H- blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspxBroken Link
- osvdb.org/62810Broken Link
- secunia.com/advisories/38860Vendor Advisory
- kb.cert.org/vuls/id/744549PatchUS Government Resource
- microsoft.com/technet/security/advisory/981374.mspxBroken LinkPatch
- securityfocus.com/bid/38615Broken Link
- us-cert.gov/cas/techalerts/TA10-068A.htmlUS Government Resource
- us-cert.gov/cas/techalerts/TA10-089A.htmlUS Government Resource
- vupen.com/english/advisories/2010/0567Vendor Advisory
- vupen.com/english/advisories/2010/0744Vendor Advisory
- docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018Vendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/56772Third Party AdvisoryVDB Entry
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 146 days
- CVSS
- 8.8 HIGH
- EPSS (30-day exploit probability)
- 82.2% · top 1% of all CVEs
- Weakness
- CWE-399
- Attack vector
- Network, remotely reachable
- 1.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
- 4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.