CVE-2010-3962highunder attackCWE-416

CVE-2010-3962

Published 05 Nov 2010 · Updated 22 Oct 2025

Follow this CVE + Monitor Internet Explorer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.1epss 97%

from disclosure to weaponsame day

Published on NVDNov 5

1st PoCNov 4

metasploitNov 3

CISA KEV+5449d

Action required by CISAfederal deadline: 2025-10-27

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

Internet Explorer 6, 7, and 8 have a flaw where malicious CSS code on a webpage can crash the browser or make it run harmful programs. This happens because the browser tries to use data that was already deleted from memory.

Technical detail

Use-after-free vulnerability in IE 6-8 triggered via crafted CSS token sequences involving the clip attribute, leading to access of freed memory. Remote attacker can achieve arbitrary code execution through malicious HTML/CSS without user interaction beyond visiting a compromised website. Uninitialized memory corruption allows bypassing security boundaries.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

public PoCs found — 5✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16551 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/15421 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/15418 cve_referencewww.exploit-db.com/exploits/15421unverified cve_referencewww.exploit-db.com/exploits/15418unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 http://secunia.com/advisories/42091 https://exchange.xforce.ibmcloud.com/vulnerabilities/62962 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12279 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3962 http://www.exploit-db.com/exploits/15418 http://www.exploit-db.com/exploits/15421 http://www.kb.cert.org/vuls/id/899748 http://www.microsoft.com/technet/security/advisory/2458511.mspx http://www.securityfocus.com/bid/44536 http://www.securitytracker.com/id?1024676