Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Exploit.JS.CVE-2010-0806.c

 
Aliases:
Pattern:201004201330
Threat Type Propagation Methods Systems Affected Risk Level
  • Exploit
  • Exploit Vulnerability
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
Microsoft Internet Explorer is prone to a Code Execution Vulnerability.
The issue occurs because a use-after-free error in iepeers.dll when handling invalid values passed to the "setAttribute()" function can be exploited to dereference invalid memory when a specially crafted web page using the "#default#userData" behavior is accessed.
By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privilege of the victim.
Affected: Microsoft Internet Explorer 7.0
Microsoft Internet Explorer 6.0 SP1
Microsoft Internet Explorer 6.0

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.