New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2010-3346

NVDCIRCLENISA

EUVD-2010-3344 · Published Dec 16, 2010

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

Technologies

Microsoft Windows 7Microsoft Windows VistaMicrosoft Internet ExplorerMicrosoft Windows XpMicrosoft Windows Server 2003Microsoft Windows Server 2008

Weaknesses

CWE-908

CVSS scores

  • v2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot