CVE-2010-0491
No fix known EPSS 29%
Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka "HTML Object Memory Corruption Vulnerability."
Products: microsoft internet_explorer, microsoft windows_2003_server, microsoft windows_server_2003, microsoft windows_xp, microsoft windows_2000