CVE-2010-0806

HIGH

Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."

CVSS v3.1 Score

8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 3/10/2010Modified: 5/21/2026

Related Intelligence (0)

No articles currently reference this CVE.

References (28)

http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspxBroken Linkhttp://osvdb.org/62810Broken Linkhttp://secunia.com/advisories/38860Vendor Advisoryhttp://www.kb.cert.org/vuls/id/744549PatchUS Government Resourcehttp://www.microsoft.com/technet/security/advisory/981374.mspxPatchVendor Advisoryhttp://www.securityfocus.com/bid/38615Broken Linkhttp://www.us-cert.gov/cas/techalerts/TA10-068A.htmlUS Government Resourcehttp://www.us-cert.gov/cas/techalerts/TA10-089A.htmlUS Government Resourcehttp://www.vupen.com/english/advisories/2010/0567Vendor Advisoryhttp://www.vupen.com/english/advisories/2010/0744Vendor Advisoryhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018Vendor Advisoryhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56772Third Party AdvisoryVDB Entryhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446Broken Linkhttp://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspxBroken Linkhttp://osvdb.org/62810Broken Linkhttp://secunia.com/advisories/38860Vendor Advisoryhttp://www.kb.cert.org/vuls/id/744549PatchUS Government Resourcehttp://www.microsoft.com/technet/security/advisory/981374.mspxPatchVendor Advisoryhttp://www.securityfocus.com/bid/38615Broken Linkhttp://www.us-cert.gov/cas/techalerts/TA10-068A.htmlUS Government Resourcehttp://www.us-cert.gov/cas/techalerts/TA10-089A.htmlUS Government Resourcehttp://www.vupen.com/english/advisories/2010/0567Vendor Advisoryhttp://www.vupen.com/english/advisories/2010/0744Vendor Advisoryhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018Vendor Advisoryhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56772Third Party AdvisoryVDB Entryhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446Broken Linkhttps://learn.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018Vendor Advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0806US Government Resource