Researchers Bypass Microsoft Fix It for IE Zero Day

🗓️ 04 Jan 2013 18:34:39Reported by Michael MimosoType

threatpost🔗 threatpost.com👁 46 Views

Researchers Bypass Microsoft Fix It for IE Zero Day. Pressure on Microsoft for Full Patch

Reporter	Title	Published	Views	Family All 116
zdt	Internet Explorer Same ID Property Deleted Object Handling Memory Corruption	14 Jun 201200:00	–	zdt
zdt	MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability	9 Oct 201200:00	–	zdt
zdt	Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free	31 Dec 201200:00	–	zdt
zdt	MS12-037 Internet Explorer 8 Same ID Property Deleted Object Handling Memory Corruption	9 Feb 201300:00	–	zdt
ATTACKERKB	CVE-2012-4792	30 Dec 201200:00	–	attackerkb
ATTACKERKB	Microsoft Internet Explorer execCommand Use-After-Free	18 Sep 201200:00	–	attackerkb
ATTACKERKB	Microsoft Internet Explorer SetMouseCapture Use-After-Free	9 Oct 201300:00	–	attackerkb
ATTACKERKB	CVE-2012-4969	18 Sep 201200:00	–	attackerkb
ATTACKERKB	MS12-037 Microsoft Internet Explorer Same ID Property Deleted Object Handling Memory Corruption	12 Jun 201200:00	–	attackerkb
BDU FSTEC	The vulnerability of the CMshtmlEd::Exec function (mshtml.dll) in the Internet Explorer browser allows a hacker to execute arbitrary code.	29 Jun 202200:00	–	bdu_fstec

Source	Link
threatpost	www.threatpost.com/council-foreign-relations-website-hit-watering-hole-attack-ie-zero-day-exploit-122912/
web	www.web.nvd.nist.gov/view/vuln/detail
threatpost	www.threatpost.com/patch-ie-zero-day-wont-be-among-microsoft-security-updates-next-week-010313/
threatpost	www.threatpost.com/researchers-bypass-microsoft-fix-it-ie-zero-day-010413/
blogs	www.blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx
threatpost	www.threatpost.com/ie-zero-day-watering-hole-attack-expands-handful-political-sites-010313/
blog	www.blog.exodusintel.com/2013/01/02/happy-new-year-analysis-of-cve-2012-4792/
threatpost	www.threatpost.com/elderwood-crew-tied-google-aurora-attack-targeting-defense-energy-finance-companies-090712/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

10 May 2013 15:44Current

7.9High risk

Vulners AI Score7.9

EPSS0.81716

microsoft internet explorer zero day exodus intelligence watering hole attacks cve-2012-4792 patch tuesday advisory appcompat shim remote code execution vulnerability elderwood project