CVE-2010-0491

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 29.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-31 · updated 2026-06-16
Weakness: CWE-399

Description

Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka "HTML Object Memory Corruption Vulnerability."

Affected products

Microsoft Internet Explorer 11: 6, 5.01-sp4, 6-sp1
Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: all versions
Microsoft Windows Server 2003: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864
http://securitytracker.com/id?1023773
http://www.securityfocus.com/bid/39027
http://www.us-cert.gov/cas/techalerts/TA10-068A.html
http://www.us-cert.gov/cas/techalerts/TA10-089A.html
http://www.vupen.com/english/advisories/2010/0744
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8421
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864
http://securitytracker.com/id?1023773
http://www.securityfocus.com/bid/39027
http://www.us-cert.gov/cas/techalerts/TA10-068A.html

Get alerted when CVE-2010-0491 or the next vulnerability affects your stack