ByteOS Network

NVD Vulnerability Details :

CVE-2010-3345

Deferred

Source-secure@microsoft.com

Published At-16 Dec, 2010 | 19:33

Updated At-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Microsoft Corporation

>>internet_explorer>>8

cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_7>>-

cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2003>>-

cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_server_2008:-:-:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>-

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_server_2008>>r2

cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>-

cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*

Microsoft Corporation

>>windows_vista>>-

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Microsoft Corporation

>>windows_xp>>-

cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*

Microsoft Corporation

>>windows_xp>>-

cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-908	Primary	nvd@nist.gov

CWE ID: CWE-908

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securitytracker.com/id?1024872	secure@microsoft.com	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-348A.html	secure@microsoft.com	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090	secure@microsoft.com	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11849	secure@microsoft.com	Tool Signature
http://www.securitytracker.com/id?1024872	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-348A.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11849	af854a3a-2127-422b-91ae-364da2661108	Tool Signature