CVE ID:	CVE-2010-0249
Description:	Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka "HTML Object Memory Corruption Vulnerability."
Test IDs:	1.3.6.1.4.1.25623.1.0.800429
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0249 BugTraq ID: 37815 http://www.securityfocus.com/bid/37815 Cert/CC Advisory: TA10-055A http://www.us-cert.gov/cas/techalerts/TA10-055A.html CERT/CC vulnerability note: VU#492515 http://www.kb.cert.org/vuls/id/492515 http://www.exploit-db.com/exploits/11167 http://news.cnet.com/8301-27080_3-10435232-245.html Microsoft Security Bulletin: MS10-002 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 Microsoft Knowledge Base article: 979352 http://support.microsoft.com/kb/979352 http://osvdb.org/61697 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835 http://securitytracker.com/id?1023462 http://www.vupen.com/english/advisories/2010/0135 XForce ISS Database: ie-freed-object-code-execution(55642) https://exchange.xforce.ibmcloud.com/vulnerabilities/55642