CVE-2010-3345 Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is...
HighCVSS 9.3
EPSS 28.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 8 | No fix listed |
References
- 1024872 broken-link third-party-advisory vdb-entry
- TA10-348A third-party-advisory us-government-resource
- MS10-090 patch vendor-advisory
- oval:org.mitre.oval:def:11849 signature tool-signature vdb-entry