CVE-2010-1991

medium · 5

Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.

CVSS

10.5%

EPSS (exploit prob.)

96th

EPSS percentile

2010-05-20

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
microsoft	ie	8.0.7600.16385
microsoft	internet_explorer	6.0.2900.2180
microsoft	internet_explorer	7
microsoft	internet_explorer	7.0

Check a specific version with /api/v1/cve/match.

References

http://websecurity.com.ua/4206/
http://www.securityfocus.com/archive/1/511327/100/0/threaded
http://websecurity.com.ua/4206/
http://www.securityfocus.com/archive/1/511327/100/0/threaded

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-1991