Release DateMar 31, 2010 |
Severitycritical |
ImpactDenial of serviceSystem compromise |
DescriptionThis indicates a possible attack against a memory-corruption vulnerability in Microsoft Internet Explorer.The vulnerability occurs when the vulnerable software handles certain DOM operations. A remote attacker may exploit this to execute arbitrary code or to cause a denial-of-service condition. |
Affected ProductsMicrosoft Internet Explorer versions 5.01 to 8 |
Recommended ActionsRefer to the vendor's advisory for the patches:http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2010-0490 |
Reference/shttp://technet.microsoft.com/en-us/security/bulletin/ms10-018.mspx (MS-ID) |