CVE-2010-1117: Microsoft Internet Explorer

High severity, CVSS 7.6. EPSS: 14.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

Affected products

• Microsoft Internet Explorer: version 8.0.6001 only

Published 2010-03-25. Last modified 2026-06-16.