CVE-2010-1263

State: Published
Severity: Not scored
Published: Jun 8, 2010
Updated: Aug 7, 2024
Reserved: Apr 5, 2010

Description

Windows Shell and WordPad in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; Microsoft Office XP SP3; Office 2003 SP3; and Office System 2007 SP1 and SP2 do not properly validate COM objects during instantiation, which allows remote attackers to execute arbitrary code via a crafted file, aka "COM Validation Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

MS10-083vendor-advisory
40574vdb-entry
MS10-036vendor-advisory
oval:org.mitre.oval:def:7286vdb-entrysignature
TA10-159Bthird-party-advisory
TA10-285Athird-party-advisory
1024555vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.