CVE-2010-0249

Published: Jan 15, 2010Modified: May 21, 2026CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability."

Affected (5)

Products: Microsoft: Internet Explorer

1 product

Internet Explorer

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 5.0.1 sp4
Microsoft Internet Explorer	Version 6 sp1

Running on/with	Platform Versions
Microsoft Windows 2000	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 7.0

Running on/with	Platform Versions
Microsoft Windows Server 2003	All versions

Configuration D

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 8

Running on/with	Platform Versions
Microsoft Windows 7	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	Version r2
Microsoft Windows Server 2008	Version r2
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (29)

http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx

Source: secure@microsoft.com

Broken LinkVendor Advisory

http://news.cnet.com/8301-27080_3-10435232-245.html

Source: secure@microsoft.com

Broken Link

http://osvdb.org/61697

Source: secure@microsoft.com

Broken Link

http://securitytracker.com/id?1023462

Source: secure@microsoft.com

Broken LinkThird Party AdvisoryVDB Entry

http://support.microsoft.com/kb/979352

Source: secure@microsoft.com

PatchVendor Advisory

http://www.exploit-db.com/exploits/11167

Source: secure@microsoft.com

ExploitThird Party AdvisoryVDB Entry

http://www.kb.cert.org/vuls/id/492515

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.microsoft.com/technet/security/advisory/979352.mspx

Source: secure@microsoft.com

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/bid/37815

Source: secure@microsoft.com

Broken LinkExploitThird Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA10-055A.html

Source: secure@microsoft.com

Broken LinkThird Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2010/0135

Source: secure@microsoft.com

Broken Link

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

Source: secure@microsoft.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/55642

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835

Source: secure@microsoft.com

Broken Link

http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

http://news.cnet.com/8301-27080_3-10435232-245.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://osvdb.org/61697

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://securitytracker.com/id?1023462

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryVDB Entry

http://support.microsoft.com/kb/979352

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.exploit-db.com/exploits/11167

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

http://www.kb.cert.org/vuls/id/492515

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.microsoft.com/technet/security/advisory/979352.mspx

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/bid/37815

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploitThird Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA10-055A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkThird Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2010/0135

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/55642

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0249

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.