CVE-2010-0805

The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the CTDCCtl::SecurityCHeckDataURL function, aka "Memory Corruption Vulnerability."

• CWE-94

• http://securitytracker.com/id?1023773
• http://www.securityfocus.com/archive/1/510507/100/0/threaded
• http://www.securityfocus.com/bid/39025Patch
• http://www.us-cert.gov/cas/techalerts/TA10-068A.htmlUS Government Resource
• http://www.us-cert.gov/cas/techalerts/TA10-089A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2010/0744Patch, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-034
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8080
• http://securitytracker.com/id?1023773
• http://www.securityfocus.com/archive/1/510507/100/0/threaded
• http://www.securityfocus.com/bid/39025Patch
• http://www.us-cert.gov/cas/techalerts/TA10-068A.htmlUS Government Resource
• http://www.us-cert.gov/cas/techalerts/TA10-089A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2010/0744Patch, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-10-034
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8080

Published

Mar 31, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0799Directory traversal vulnerability in misc/tell_a_friend/tell…
• CVE-2010-0800SQL injection vulnerability in the Ossolution Team Documents…
• CVE-2010-0801Directory traversal vulnerability in the AutartiTarot (com_a…
• CVE-2010-0802SQL injection vulnerability in index.php in (nv2) Awards 1.1…
• CVE-2010-0803SQL injection vulnerability in the jVideoDirect (com_jvideod…
• CVE-2010-0804Cross-site scripting (XSS) vulnerability in index.php in iBo…
• CVE-2010-0806Use-after-free vulnerability in the Peer Objects component (…8.8
• CVE-2010-0807Microsoft Internet Explorer 7 does not properly handle objec…
• CVE-2010-0808Microsoft Internet Explorer 6 and 7 on Windows XP and Vista …
• CVE-2010-0809Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-0810The kernel in Microsoft Windows Vista Gold, SP1, and SP2, an…
• CVE-2010-0811Multiple unspecified vulnerabilities in the Microsoft Intern…