Release DateJan 22, 2010 |
Severitycritical |
ImpactSystem CompromiseDenial of Service |
DescriptionThis indicates an attack attempt against a memory-corruption vulnerability in Microsoft Internet Explorer.The vulnerability is caused by an error when the vulnerable software handles a specially crafted web page. It allows a remote attacker to execute arbitrary code. |
Affected ProductsMicrosoft Internet Explorer 6Microsoft Internet Explorer 6 Service Pack 1 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 |
Recommended ActionsApply the patch released by the vendor:http://www.microsoft.com/technet/security/Bulletin/MS10-002.mspx |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2010-0248 |
Reference/shttp://www.microsoft.com/technet/security/Bulletin/MS10-002.mspx (MS-ID) |