Every CVE Search/ Get API key

CVE-2010-1175

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to...

9.3 HighPublic exploit

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."

Exploit likelihood

14.1%Down 8.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."

Record
CVE-2010-1175
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."

Record
CVE-2010-1175
Updated
2026-11-02
EUVDEUVD-2010-1205 No score

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."

Record
EUVD-2010-1205
Updated
2026-11-03
GitHub AdvisoriesGHSA-mw4r-8558-fm72 No score

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to...

Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified impact via a certain XML document that references a crafted web site in the SRC attribute of an image element, related to a "0day Vulnerability."

Record
GHSA-mw4r-8558-fm72
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMicrosoft Internet Explorer - XML Parsing Buffer Overflow (1)2008-12-15

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1175 is a high vulnerability (CVSS 9.3) in Microsoft Internet Explorer, published March 29, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.1%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open