MSRXVulnerabilities / CVE-2010-0806
CVE-2010-0806
Published 2010-03-10 · published (not yet in NVD)
CVE-2010-0806
Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2026-05-20, with a fix-by date of 2026-06-03. Patch it first.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
8.8 HIGH
CVSS 3.1 · CNA
CVSS 3.1 · CNA
82%
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)
chance of exploitation in the next 30 days (EPSS; in the top 1% of all CVEs)
Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka "Uninitialized Memory Corruption Vulnerability."
Scores
Affected products
- n/a n/a: n/a
13 references (advisories, patches, write-ups)
- http://osvdb.org/62810 · vdb-entry, x_refsource_OSVDB
- http://www.us-cert.gov/cas/techalerts/TA10-089A.html · third-party-advisory, x_refsource_CERT
- http://www.securityfocus.com/bid/38615 · vdb-entry, x_refsource_BID
- http://www.vupen.com/english/advisories/2010/0567 · vdb-entry, x_refsource_VUPEN
- http://secunia.com/advisories/38860 · third-party-advisory, x_refsource_SECUNIA
- http://www.us-cert.gov/cas/techalerts/TA10-068A.html · third-party-advisory, x_refsource_CERT
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018 · vendor-advisory, x_refsource_MS
- http://www.microsoft.com/technet/security/advisory/981374.mspx · x_refsource_CONFIRM
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56772 · vdb-entry, x_refsource_XF
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8446 · vdb-entry, signature, x_refsource_OVAL
- http://www.vupen.com/english/advisories/2010/0744 · vdb-entry, x_refsource_VUPEN
- http://blogs.technet.com/msrc/archive/2010/03/09/security-advisory-981374-released.aspx · x_refsource_CONFIRM
- http://www.kb.cert.org/vuls/id/744549 · third-party-advisory, x_refsource_CERT-VN
Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.