Lucene search

K
cve[email protected]CVE-2012-4782
HistoryDec 12, 2012 - 12:55 a.m.

CVE-2012-4782

2012-12-1200:55:01
CWE-399
web.nvd.nist.gov
23
cve
microsoft
internet explorer
vulnerability
remote attackers
arbitrary code
web site
cmarkup
use after free
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.924 High

EPSS

Percentile

99.0%

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka “CMarkup Use After Free Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch9
AND
microsoftwindows_7x64
OR
microsoftwindows_7x86
OR
microsoftwindows_7sp1x64
OR
microsoftwindows_7sp1x86
OR
microsoftwindows_server_2008r2x64
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008sp2x86
OR
microsoftwindows_vistasp2
Node
microsoftinternet_explorerMatch10
AND
microsoftwindows_8Match--x64
OR
microsoftwindows_8Match--x86
OR
microsoftwindows_rtMatch-
OR
microsoftwindows_server_2012Match-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.924 High

EPSS

Percentile

99.0%