CVE ID:	CVE-2010-3962
Description:	Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute, aka an "invalid flag reference" issue or "Uninitialized Memory Corruption Vulnerability," as exploited in the wild in November 2010.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3962 BugTraq ID: 44536 http://www.securityfocus.com/bid/44536 Cert/CC Advisory: TA10-348A http://www.us-cert.gov/cas/techalerts/TA10-348A.html CERT/CC vulnerability note: VU#899748 http://www.kb.cert.org/vuls/id/899748 http://www.exploit-db.com/exploits/15418 http://www.exploit-db.com/exploits/15421 http://www.symantec.com/connect/blogs/new-ie-0-day-used-targeted-attacks Microsoft Security Bulletin: MS10-090 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-090 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12279 http://www.securitytracker.com/id?1024676 http://secunia.com/advisories/42091 http://www.vupen.com/english/advisories/2010/2880 XForce ISS Database: ms-ie-flag-code-execution(62962) https://exchange.xforce.ibmcloud.com/vulnerabilities/62962