Lucene search
HistoryJun 12, 2012 - 10:55 p.m.
CVE-2012-1874
cve-2012-1874
microsoft
internet explorer
memory object handling
vulnerability
remote code execution
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8
Confidence
Low
EPSS
0.921
Percentile
99.0%
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows user-assisted remote attackers to execute arbitrary code by accessing a deleted object, aka “Developer Toolbar Remote Code Execution Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch8
ORmicrosoftinternet_explorerMatch9
microsoftwindows_7x64
ORmicrosoftwindows_7x86
ORmicrosoftwindows_7sp1x86
ORmicrosoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008sp2itanium
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008sp2x86
ORmicrosoftwindows_server_2008Match-sp2itanium
ORmicrosoftwindows_server_2008Matchr2itanium
ORmicrosoftwindows_server_2008Matchr2x64
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | internet_explorer | 8 | cpe:/a:microsoft:internet_explorer:8::: |
| microsoft | internet_explorer | 9 | cpe:/a:microsoft:internet_explorer:9::: |
Related
securityvulns
securityvulns
[CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability
2012-06-17 00:00:00
Microsoft Internet Explorer multiple security vulnerabilities
2012-06-25 00:00:00
symantec
symantec
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2012-1874
2012-06-12 22:00:00
nvd
nvd
CVE-2012-1874
2012-06-12 22:55:01
seebug
seebug
Microsoft Internet Explorer 8 / 9 Toolbar Code Execution(CVE-2012-1874)
2012-06-14 00:00:00
prion
prion
Remote code execution
2012-06-12 22:55:00
nessus
nessus
MS12-037: Cumulative Security Update for Internet Explorer (2699988)
2012-06-13 00:00:00
mskb
mskb
MS12-037: Cumulative Security Update for Internet Explorer: June 12, 2012
2012-06-12 00:00:00
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2699988)
2012-06-13 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2699988)
2012-06-13 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8
Confidence
Low
EPSS
0.921
Percentile
99.0%
Related for CVE-2012-1874