Secunia
Login
|
|
CVE Reference: CVE-2010-1263 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2010-1263 |
|
|
Description: Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during instantiation, which allows remote attackers to execute arbitrary code via a crafted file, aka "COM Validation Vulnerability." |
|
|
CVE Status: Candidate |
|
|
References: ST 1024555 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7286 MS http://www.microsoft.com/technet/security/Bulletin/MS10-083.mspx http://www.microsoft.com/technet/security/bulletin/ms10-036.mspx CERT http://www.us-cert.gov/cas/techalerts/TA10-285A.html http://www.us-cert.gov/cas/techalerts/TA10-159B.html BID 40574 |
|
| Return to the previous page. |
