Sign in

8.1 High

CVE-2010-0492 Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary…

Description

Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

Affected products and versions

Product	Affected versions	Fixed in
n/a	Versions not published
ie	8	No fix stated

The 144658 CVEs of n/a →

CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the… Not rated CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin… Not rated CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it… Not rated CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep… Not rated

Do you use n/a?

Track this CVE Watch n/a Check my SBOMs

cveye.io/en/cve/CVE-2010-0492

Timeline

Published March 31, 2010
Last modified October 21, 2024

References

oval:org.mitre.oval:def:7722 oval.cisecurity.org
TA10-089A www.us-cert.gov
www.zerodayinitiative.com www.zerodayinitiative.com
TA10-068A www.us-cert.gov
MS10-018 docs.microsoft.com
20100402 ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability www.securityfocus.com
39030 www.securityfocus.com
ADV-2010-0744 www.vupen.com
1023773 securitytracker.com

Track this CVE