Lucene search

K
cve[email protected]CVE-2012-2522
HistoryAug 15, 2012 - 1:55 a.m.

CVE-2012-2522

2012-08-1501:55:01
CWE-94
web.nvd.nist.gov
99
cve-2012-2522
microsoft internet explorer
remote code execution
memory corruption
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.857 High

EPSS

Percentile

98.6%

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table’s deletion, aka β€œVirtual Function Table Corruption Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7
OR
microsoftinternet_explorerMatch8
OR
microsoftinternet_explorerMatch9

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.857 High

EPSS

Percentile

98.6%