CVE-2010-0027 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2010-0027

Modified

More Info Official Page

Source-secure@microsoft.com

Published At-22 Jan, 2010 | 22:00

Updated At-29 Apr, 2026 | 01:13

The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka "URL Validation Vulnerability."

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>internet_explorer>>8

cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>8.0.6001

cpe:2.3:a:microsoft:internet_explorer:8.0.6001:*:*:*:*:*:*:*

Microsoft Corporation

cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2003>>*

cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>-

cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7

cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7.0

cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7.0.5730

cpe:2.3:a:microsoft:internet_explorer:7.0.5730:unknown:gold:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7.0.5730.11

cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7.00.5730.1100

cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7.00.6000.16386

cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>7.00.6000.16441

cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2003>>*

cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>*

cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>*

cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>-

cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>5.01

cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>6

cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

Microsoft Corporation

>>internet_explorer>>6

cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_2000>>*

cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_2003_server>>*

cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*

Microsoft Corporation

>>windows_server_2003>>*

cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>*

cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>-

cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov

CWE ID: CWE-94

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/archive/1/509470/100/0/threaded	secure@microsoft.com	N/A
http://www.us-cert.gov/cas/techalerts/TA10-040A.html	secure@microsoft.com	US Government Resource
http://www.zerodayinitiative.com/advisories/ZDI-10-016/	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002	secure@microsoft.com	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007	secure@microsoft.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/55773	secure@microsoft.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464	secure@microsoft.com	N/A
http://www.securityfocus.com/archive/1/509470/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA10-040A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.zerodayinitiative.com/advisories/ZDI-10-016/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002	af854a3a-2127-422b-91ae-364da2661108	N/A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/55773	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.securityfocus.com/archive/1/509470/100/0/threaded

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Source: secure@microsoft.com

Resource:

US Government Resource

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-10-016/

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55773

Source: secure@microsoft.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464

Source: secure@microsoft.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/509470/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA10-040A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-10-016/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55773

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A