The host is installed with Internet Explorer and is prone to Remote Code Execution vulnerability. This NVT has been replaced by NVT secpod_ms10-002.nasl (OID:1.3.6.1.4.1.25623.1.0.901097).

Successful exploitation will allow remote attackers to execute arbitrary code via specially crafted attack. Impact Level: Application

Apply the patch, http://support.microsoft.com/kb/979352 Workaround: Apply workaround as in the advisory. ***** NOTE: Ignore this warning if you are using IE 8 on Windows XP SP3 because IE 8 opts-in to DEP by default. *****

An invalid pointer reference error exists under certain conditions letting an invalid pointer to be accessed after an object is deleted.

Internet Explorer Version 6.x, 7.x , 8.x

• http://support.microsoft.com/kb/979352
• http://www.microsoft.com/technet/security/advisory/979352.mspx

---

Updated on 2015-03-25