Unrated severityNVD Advisory· Published Mar 25, 2010· Updated Apr 29, 2026

CVE-2010-1117

Description

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Affected products

Microsoft/Internet Explorer
cpe:2.3:a:microsoft:internet_explorer:8.0.6001:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

vreugdenhilresearch.nl/Pwn2Own-2010-Windows7-InternetExplorer8.pdfnvdExploit
dvlabs.tippingpoint.com/blog/2010/02/15/pwn2own-2010nvd
news.cnet.com/8301-27080_3-20001126-245.htmlnvd
twitter.com/thezdi/statuses/11003801960nvd
exchange.xforce.ibmcloud.com/vulnerabilities/57196nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.031
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000