CVE-2010-0492

HIGH 8.1CVE-2010-0492 · Published 31/03/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 8= 8.0.6001`	No fix yet

Description

Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

References

securitytracker.com/id
securityfocus.com/archive/1/510506/100/0/threaded
securityfocus.com/bid/39030 · Patch
us-cert.gov/cas/techalerts/TA10-068A.html · US Government Resource
us-cert.gov/cas/techalerts/TA10-089A.html · US Government Resource
vupen.com/english/advisories/2010/0744 · Patch
zerodayinitiative.com/advisories/ZDI-10-033
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free