$ cve CVE-2010-0805 JSON

CVE-2010-0805 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 80.5% (pctl 100)

Patch early

A public exploit exists.

Description

The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the CTDCCtl::SecurityCHeckDataURL function, aka "Memory Corruption Vulnerability."

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	80.54% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-94
On CISA KEV	no
Public exploit	yes
Published	2010-03-31
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	internet explorer
microsoft	windows 2000
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer - Tabular Data Control ActiveX Memory Corruption (MS10-018) (Metasploit)	2010-04-30
exploit-db	Microsoft Internet Explorer Tabular Data Control - ActiveX Remote Code Execution	2010-04-03

References

→ the Explorer · watch your stack · NVD