« Volver al listado

CVE-2010-3886

Estado: ModificadaMedia (4.3)—💥 Exploit

La función CTimeoutEventList::InsertIntoTimeoutList en el fichero mshtml.dll de Microsoft utiliza un valor de puntero para producir de valores de identificación a partir de un temporizador para los métodos setTimeout y setInterval en VBScript y JScript, lo que permite a atacantes remotos obtener información sensible acerca de las direcciones de la memoria 'heap' usada por una aplicación, como lo demuestra la aplicación Internet Explorer 8.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Tecnologías afectadas (1)

Microsoft — Internet Explorer

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-3886",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-10-08T22:00:36.707",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2010-06/0259.html",
      "tags": [
        "Broken Link",
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://twitter.com/WisecWisec/statuses/17254776077",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100630",
      "tags": [
        "Not Applicable"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11606",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2010-06/0259.html",
      "tags": [
        "Broken Link",
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://twitter.com/WisecWisec/statuses/17254776077",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100630",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11606",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory addresses used by an application, as demonstrated by the Internet Explorer 8 application."
    },
    {
      "lang": "es",
      "value": "La función CTimeoutEventList::InsertIntoTimeoutList en el fichero mshtml.dll de Microsoft utiliza un valor de puntero para producir de valores de identificación a partir de un temporizador para los métodos setTimeout y setInterval en VBScript y JScript, lo que permite a atacantes remotos obtener información sensible acerca de las direcciones de la memoria 'heap' usada por una aplicación, como lo demuestra la aplicación Internet Explorer 8."
    }
  ],
  "lastModified": "2026-06-16T23:23:45.600",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A52E757F-9B41-43B4-9D67-3FEDACA71283"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}