CVE-2012-4969

Warnung

EPSS 81.72%
Veröffentlicht 18.09.2012 10:39:14
Zuletzt bearbeitet 16.06.2026 23:45:58
Erkennungen
Login

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 15

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version 6

Microsoft ≫ Internet Explorer Version 7

   Microsoft ≫ Windows Server 2003 Version - Update sp2
   Microsoft ≫ Windows Server 2003 Version - Update sp2 HwPlatform itanium
   Microsoft ≫ Windows Server 2003 Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform itanium
   Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Vista Version - Update sp2
   Microsoft ≫ Windows Vista Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp3

Microsoft ≫ Internet Explorer Version 8

   Microsoft ≫ Windows 7 Version - Update - HwPlatform x64
   Microsoft ≫ Windows 7 Version - Update sp1 HwPlatform x64
   Microsoft ≫ Windows Server 2003 Version - Update sp2
   Microsoft ≫ Windows Server 2003 Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version r2 HwPlatform itanium
   Microsoft ≫ Windows Server 2008 Version r2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform itanium
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Vista Version - Update sp2
   Microsoft ≫ Windows Vista Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Xp Version - Update sp3

Microsoft ≫ Internet Explorer Version 9

   Microsoft ≫ Windows 7 HwPlatform -
   Microsoft ≫ Windows 7 HwPlatform x64
   Microsoft ≫ Windows 7 Version - Update - HwPlatform x64
   Microsoft ≫ Windows 7 Version - Update sp1 HwPlatform x64
   Microsoft ≫ Windows 7 Version - Update sp1 HwPlatform x86
   Microsoft ≫ Windows Server 2008 Version - Update sp2
   Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version r2 HwPlatform x64
   Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
   Microsoft ≫ Windows Vista Version - Update sp2
   Microsoft ≫ Windows Vista Version - Update sp2 HwPlatform x64

08.06.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Internet Explorer Use-After-Free Vulnerability

Schwachstelle

Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute code via a crafted web site.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	81.72%	0.996

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://www.us-cert.gov/cas/techalerts/TA12-255A.html

Third Party Advisory

US Government Resource

http://blog.vulnhunt.com/index.php/2012/09/17/ie-execcommand-fuction-use-after-free-vulnerability-0day_en/

Broken Link

http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/browser/ie_execcommand_uaf.rb

Broken Link

http://eromang.zataz.com/2012/09/16/zero-day-season-is-really-not-over-yet/

Third Party Advisory

http://technet.microsoft.com/security/advisory/2757760

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/480095

Third Party Advisory

US Government Resource

http://www.securitytracker.com/id?1027538

Third Party Advisory

VDB Entry

http://www.securityweek.com/new-internet-explorer-zero-day-being-exploited-wild

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA12-262A.html

Third Party Advisory

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA12-265A.html

Third Party Advisory

US Government Resource

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15729

Third Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-4969

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2012-4969

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-4969

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-4969

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2012-4969

08.06.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog