Lucene search

K
cve[email protected]CVE-2012-0155
HistoryFeb 14, 2012 - 10:55 p.m.

CVE-2012-0155

2012-02-1422:55:02
CWE-94
web.nvd.nist.gov
117
cve-2012-0155
microsoft
internet explorer
vml
remote code execution
vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.965 High

EPSS

Percentile

99.6%

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka β€œVML Remote Code Execution Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch9
AND
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2
OR
microsoftwindows_server_2008Matchr2sp1
OR
microsoftwindows_vistaMatch-sp2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.965 High

EPSS

Percentile

99.6%