Vulnerability Details : CVE-2010-3971

Public exploit exists!
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in mshtml.dll, as used in Microsoft Internet Explorer 6 through 8 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a self-referential @import rule in a stylesheet, aka "CSS Memory Corruption Vulnerability."
Published 2010-12-22 21:00:18
Updated 2021-07-23 15:12:31
Source Microsoft Corporation
View at NVD,   CVE.org
Vulnerability category: Memory CorruptionExecute codeDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2010-3971

Probability of exploitation activity in the next 30 days: 97.18%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2010-3971

  • MS11-003 Microsoft Internet Explorer CSS Recursive Import Use After Free
    Disclosure Date: 2010-11-29
    First seen: 2020-04-26
    exploit/windows/browser/ms11_003_ie_css_import
    This module exploits a memory corruption vulnerability within Microsoft\'s HTML engine (mshtml). When parsing an HTML page containing a recursive CSS import, a C++ object is deleted and later reused. This leads to arbitrary code execution. This exploit uti

CVSS scores for CVE-2010-3971

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
9.3
 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
 NIST

CWE ids for CVE-2010-3971

  • Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-3971

Products affected by CVE-2010-3971

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close