CVE-2010-2559

CRITICAL 9.3CVE-2010-2559 · Published 11/08/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 8`	No fix yet

Description

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3671, CVE-2009-3674, CVE-2010-0245, and CVE-2010-0246.

References

us-cert.gov/cas/techalerts/TA10-222A.html · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11984 · Tool Signature

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free