Lucene search
HistoryFeb 14, 2012 - 10:55 p.m.
CVE-2012-0012
microsoft
internet explorer 9
cve-2012-0012
null byte
information disclosure
nvd
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.959 High
EPSS
Percentile
99.4%
Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory locations via a crafted web site, aka “Null Byte Information Disclosure Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | 9 |
Related
prion
prion
Information disclosure
2012-02-14 22:55:00
checkpoint_advisories
checkpoint_advisories
mskb
mskb
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2647516)
2012-02-15 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2647516)
2012-02-15 00:00:00
nessus
nessus
MS12-010: Cumulative Security Update for Internet Explorer (2647516)
2012-02-14 00:00:00
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2012-03-10 00:00:00
6.3 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.959 High
EPSS
Percentile
99.4%
Related for CVE-2012-0012