CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2010-01-15
Microsoft Internet Explorer Use-After-Free Remote Code Execution Vulnerability (CVE-2010-0249, Operation Aurora)
[Affected Scope] Microsoft Internet Explorer 6, 6 SP1, 7, and 8 running on Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted malicious webpage
[Mitigation] Apply the official Microsoft security update (KB979352) immediately, or implement temporary mitigations such as enabling DEP and disabling Active Scripting