CVE-2010-3331

N/A

Description

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability."

CVE Details

CVSS v3.1 ScoreN/A

Published10/13/2010

Last Modified4/11/2025

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:internet_explorermicrosoft:windows_2003_servermicrosoft:windows_7microsoft:windows_server_2003microsoft:windows_server_2008microsoft:windows_vistamicrosoft:windows_xp

Weaknesses (CWE)

CWE-94

References

http://support.avaya.com/css/P8/documents/100113324(secure@microsoft.com)

http://www.us-cert.gov/cas/techalerts/TA10-285A.html(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6832(secure@microsoft.com)

http://support.avaya.com/css/P8/documents/100113324(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA10-285A.html(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6832(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.