Microsoft IE HTML
Object Remote Code Execution Vulnerability
Date
Discovered:
03/31/2010
Severity:
High
Operating
Systems Affected:
Microsoft
Windows
Applications
Affected:
Microsoft
Internet Explorer 8
Type:
Remote
Identifiers:
CVE-2010-0492
Synopsis
Microsoft Internet Explorer is prone to a memory corruption
vulnerability, which could be exploited to execute remote code and gain
the same user
rights as a logged-on user.
Microsoft
Internet
Explorer is a well known proprietary web browser application
developed by Microsoft and included as part of the Microsoft Windows
line of operating systems. A memory corruption flaw exists
in Microsoft Internet Explorer 8.
The flaw exists due to improper handling of objects by mstime.dll in
Microsoft Internet explorer.
Successful
exploitation allows remote attackers to run arbitrary code in the
context of the user running the affected application or failed attacks
may cause denial-of-service condition leading to crash.
