Buffer overflow in Microsoft Internet Explorer
CVE-2010-1117
Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.
Vulnerability class: Buffer Overflow
EPSS: 0.140 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 8.0.6001
- Microsoft Windows_7
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (Exploit, x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_XF)