Out-of-Band IE Patch Released as More Sites Attacked

🗓️ 14 Jan 2013 20:29:58Reported by Michael MimosoType

Out-of-Band IE Patch Released as More Sites Attacked. New zero-day vulnerability in Internet Explorer exploited in watering hole attacks, targeting high-value sites worldwide. Patch released by Microsoft following the public release of the exploit, as multiple telco, manufacturing, and human rights sites infected and serving exploits

Reporter	Title	Published	Views	Family All 42
0day.today	Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free	31 Dec 201200:00	–	zdt
ATTACKERKB	CVE-2012-4792	30 Dec 201200:00	–	attackerkb
BDU FSTEC	The vulnerability of the CDwnBindInfo function in the mshtml.dll library of Internet Explorer allows a hacker to execute arbitrary code.	7 Aug 202400:00	–	bdu_fstec
Circl	CVE-2012-4792	31 Dec 201200:00	–	circl
CISA KEV Catalog	Microsoft Internet Explorer Use-After-Free Vulnerability	23 Jul 202400:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	23 Jul 202412:00	–	cisa
Check Point Advisories	Internet Explorer Heap Spray Memory Corruption (CVE-2012-4792)	30 Dec 201200:00	–	checkpoint_advisories
CVE	CVE-2012-4792	30 Dec 201218:00	–	cve
Cvelist	CVE-2012-4792	30 Dec 201218:00	–	cvelist
Exploit DB	Microsoft Internet Explorer - CDwnBindInfo Object Use-After-Free (Metasploit)	31 Dec 201200:00	–	exploitdb

Source	Link
technet	www.technet.microsoft.com/en-us/security/bulletin/ms13-008
threatpost	www.threatpost.com/council-foreign-relations-website-hit-watering-hole-attack-ie-zero-day-exploit-122912/
threatpost	www.threatpost.com/ie-zero-day-watering-hole-attack-expands-handful-political-sites-010313/
web	www.web.nvd.nist.gov/view/vuln/detail
threatpost	www.threatpost.com/out-band-ie-patch-released-more-sites-attacked-011413/
threatpost	www.threatpost.com/researchers-bypass-microsoft-fix-it-ie-zero-day-010413/
technet	www.technet.microsoft.com/en-us/security/bulletin/ms12-077

10 May 2013 14:29Current

0.1Low risk

Vulners AI Score0.1

EPSS0.78823