ZDI-12-035 : Microsoft Internet Explorer CDispNode t:MEDIA Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-035 : Microsoft Internet Explorer CDispNode t:MEDIA Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-035 February 22, 2012 - -- CVE ID: CVE-2012-0011 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected...

CVE-2012-0011

CVE-2012-0011 relates to Microsoft Internet Explorer 7–9 via MSHTML: a use-after-free in handling of HTML time (t:MEDIA) elements leads to a freed CDispNode reference, enabling remote code execution. ZDI notes IE9 involvement; MS12-010 (2647516) is the official patch. Exploitation context require...

Internet Explorer HtmlLayout Remote Code Execution (MS12-010; CVE-2012-0011)

A remote code execution vulnerability has been reported in Internet Explorer...

MS12-010: Cumulative Security Update for Internet Explorer (2647516)

The remote host is missing Internet Explorer IE Security Update 2647516. The installed version of IE is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the remote host as well as vulnerabilities that could allow the attacker to view privileged...