Vulnerabilities > CVE-2010-1127 - Unspecified vulnerability in Microsoft Internet Explorer

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

microsoft

NVD

Published: 2010-03-26

Updated: 2024-11-21

Summary

Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code, as demonstrated by setting the (1) outerHTML or (2) value property of an object returned by createElement.

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Internet Explorer 6.0.2600 Microsoft Internet Explorer 6.00.2462.0000 Microsoft Internet Explorer 6.00.2479.0006 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.0.2800 Microsoft Internet Explorer 6.0.2800.1106 Microsoft Internet Explorer 6.0.2900 Microsoft Internet Explorer 6.00.2600.0000 Microsoft Internet Explorer 6.00.2800.1106 Microsoft Internet Explorer 6.0.2900.2180 Microsoft Internet Explorer 7.0.5730 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0.5730.11 Microsoft Internet Explorer 6.00.2900.2180 Microsoft Internet Explorer 6.00.3663.0000 Microsoft Internet Explorer 6.00.3718.0000 Microsoft Internet Explorer 6.00.3790.0000 Microsoft Internet Explorer 6.00.3790.1830 Microsoft Internet Explorer 6.00.3790.3959 Microsoft Internet Explorer 7.00.5730.1100 Microsoft Internet Explorer 7.00.6000.16386 Microsoft Internet Explorer 7.00.6000.16441	26

Summary

Vulnerable Configurations

References