Lucene search

K
nvd[email protected]NVD:CVE-2012-2522
HistoryAug 15, 2012 - 1:55 a.m.

CVE-2012-2522

2012-08-1501:55:01
CWE-94
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.857 High

EPSS

Percentile

98.6%

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table’s deletion, aka β€œVirtual Function Table Corruption Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7
OR
microsoftinternet_explorerMatch8
OR
microsoftinternet_explorerMatch9

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.9 High

AI Score

Confidence

Low

0.857 High

EPSS

Percentile

98.6%