Immunity CanvasMS12_043Immunity Canvas: MS12_043
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
| Name | ms12_043 |
|---|---|
| CVE | CVE-2012-1889 Exploit Pack |
| VENDOR: Microsoft | |
| Notes: | |
| This exploit takes advantage of an uninitialized variable vulnerability as exploited in the wild. | |
| When the get_definition function is called with no value, the CElement assumes the child obj is | |
| initialized which results in remote code execution. |
Tested on:
- Windows XP Professional SP3 English with Internet Explorer 7
- Windows XP Professional SP3 English with Internet Explorer 8
- Windows Vista English with Internet Explorer 7
- Windows Vista English with Internet Explorer 8
- Windows 7 Ultimate English with Internet Explorer 8
- Windows 7 Ultimate English with Internet Explorer 9
Usage (important):
If possible, try to avoid using the js_recon module with this exploit as loading
third party software may damage heap offsets.
VersionsAffected: Internet Explorer 6/7/8/9
Repeatability:
MSADV: MS12-043
References: http://technet.microsoft.com/en-us/security/bulletin/ms12-043
CVE Url: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1889
Date public: 06/12/2012
CVSS: 9.5
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%