← Database

CVE-2010-0491

CRITICAL CVSS: 9.3 Published: 2010-03-31 Modified: 2026-06-16

Description

Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka "HTML Object Memory Corruption Vulnerability."

Affected Platforms

Microsoft Internet ExplorerMicrosoft Windows XpMicrosoft Windows Server 2003Microsoft Windows 2000Microsoft Windows 2003 Server

Weakness Type

CWE-399

References