CVE:CVE-2010-0491
CNNVD:CNNVD-201003-505
Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。
Microsoft IE存在使用释放内存漏洞。远程攻击者通过更改拥有onreadystatechange事件处理器的HTML对象的未明属性，从而执行任意代码，也叫“HTML对象内存破坏漏洞”。
solution:Upgrade microsoft internet_explorer to a higher version than 6,5.01:sp4,6:sp1,and avoid the version 6,5.01:sp4,6:sp1; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4