Lucene search
HistoryApr 10, 2012 - 9:55 p.m.
CVE-2012-0171
cve-2012-0171
microsoft internet explorer
remote code execution
memory handling
vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
Low
0.96 High
EPSS
Percentile
99.5%
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka βSelectAll Remote Code Execution Vulnerability.β
Affected configurations
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003Match-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003Match-sp2
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch8
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1
ORmicrosoftwindows_server_2003Match-sp2
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2
ORmicrosoftwindows_server_2008Matchr2sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpMatch-sp2professionalx64
ORmicrosoftwindows_xpMatch-sp3
Node
microsoftinternet_explorerMatch9
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2
ORmicrosoftwindows_server_2008Matchr2sp1
ORmicrosoftwindows_vistaMatch-sp2
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | 6 |
Related
nvd
nvd
CVE-2012-0171
2012-04-10 21:55:01
cvelist
cvelist
CVE-2012-0171
2012-04-10 21:00:00
seebug
seebug
checkpoint_advisories
checkpoint_advisories
Internet Explorer SelectAll Remote Code Execution (MS12-023; CVE-2012-0171)
2012-04-10 00:00:00
prion
prion
Remote code execution
2012-04-10 21:55:00
symantec
symantec
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
2012-04-11 00:00:00
Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
2012-04-11 00:00:00
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2012-04-19 00:00:00
nessus
nessus
MS12-023: Cumulative Security Update for Internet Explorer (2675157)
2012-04-11 00:00:00
mskb
mskb
MS12-023: Cumulative Security Update for Internet Explorer: April 10, 2012
2012-04-10 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
Low
0.96 High
EPSS
Percentile
99.5%
Related for CVE-2012-0171