VULNERABILITY INTELLIGENCE
CVE-2010-1991
CVSS score5 MEDIUM
EPSS probability10.54%
CISA KEVNot currently listed
Published2010-05-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.