Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-4969
HistorySep 18, 2012 - 10:39 a.m.

CVE-2012-4969

2012-09-1810:39:14
[email protected]
web.nvd.nist.gov
936
In Wild
cve-2012-4969
use-after-free
vulnerability
cmshtmled::exec
mshtml.dll
microsoft internet explorer
remote attackers
arbitrary code
web site
exploit

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.821 High

EPSS

Percentile

98.4%

JSON

Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in September 2012.

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
AND
microsoftwindows_serverMatch2003sp2
OR
microsoftwindows_serverMatch2003sp2itanium
OR
microsoftwindows_serverMatch2003sp2x64
OR
microsoftwindows_xpsp2professionalx64
OR
microsoftwindows_xpsp3
Node
microsoftinternet_explorerMatch7
AND
microsoftwindows_serverMatch2003sp2
OR
microsoftwindows_serverMatch2003sp2itanium
OR
microsoftwindows_serverMatch2003sp2x64
OR
microsoftwindows_serverMatch2008sp2
OR
microsoftwindows_serverMatch2008sp2itanium
OR
microsoftwindows_serverMatch2008sp2x64
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistasp2x64
OR
microsoftwindows_vistaMatch-sp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch8
AND
microsoftwindows_7x64
OR
microsoftwindows_7x64
OR
microsoftwindows_7sp1x64
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_serverMatch2003sp2
OR
microsoftwindows_serverMatch2003sp2x64
OR
microsoftwindows_serverMatch2008sp2
OR
microsoftwindows_serverMatch2008sp2x64
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_server_2008Matchr2sp1itanium
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistasp2x64
OR
microsoftwindows_vistaMatch-sp2
OR
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch9
AND
microsoftwindows_7
OR
microsoftwindows_7x64
OR
microsoftwindows_7sp1x64
OR
microsoftwindows_7sp1x86
OR
microsoftwindows_7Match--x64
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_vistasp2x64
OR
microsoftwindows_vistaMatchsp2

Related

nessus 2
canvas 1
saint 4
cert 1
threatpost 6
prion 1
thn 7
cvelist 1
attackerkb 3
checkpoint_advisories 1
cisa_kev 1
cisa 1
nvd 1
zdi 1
securityvulns 1
openvas 2
mskb 1
nessus
nessus
MS KB2757760: Vulnerability in Internet Explorer Could Allow Remote Code Execution (deprecated)
2012-09-19 00:00:00
MS12-063: Cumulative Security Update for Internet Explorer (2744842)
2012-09-21 00:00:00
canvas
canvas
Immunity Canvas: IE_EXECCOMMAND
2012-09-18 10:39:00
saint
saint
Internet Explorer CMshtmlEd execCommand Use After Free
2012-09-19 00:00:00
Internet Explorer CMshtmlEd execCommand Use After Free
2012-09-19 00:00:00
Internet Explorer CMshtmlEd execCommand Use After Free
2012-09-19 00:00:00
cert
cert
Microsoft Internet Explorer 6/7/8/9 contain a use-after-free vulnerability
2012-09-17 00:00:00
threatpost
threatpost
Another IE Exploit Targeting Defense Industry Discovered
2012-09-24 17:27:15
Energy Manufacturer Also Victimized by IE Zero Day in Watering Hole Attack
2013-01-02 21:41:29
IE Zero-Day Watering Hole Attack Expands to Handful of Political Sites
2013-01-03 22:02:04
prion
prion
Design/Logic Flaw
2012-09-18 10:39:00
thn
thn
Exploit Released for Internet Explorer zero-day attacks : CVE-2012-4969
2012-09-19 20:08:00
CFR watering hole attack also target Capstone Turbine Corporation
2013-01-02 12:23:00
CFR watering hole attack also target Capstone Turbine Corporation
2013-01-02 01:23:00
cvelist
cvelist
CVE-2012-4969
2012-09-18 10:00:00
attackerkb
attackerkb
Microsoft Internet Explorer execCommand Use-After-Free
2012-09-18 00:00:00
CVE-2012-4969
2012-09-18 00:00:00
Microsoft Internet Explorer SetMouseCapture Use-After-Free
2020-10-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer execCommand Use-After-Free (CVE-2012-4969)
2012-09-19 00:00:00
cisa_kev
cisa_kev
Microsoft Internet Explorer Use-After-Free Vulnerability
2022-06-08 00:00:00
cisa
cisa
Microsoft Releases Security Advisory for Internet Explorer
2012-09-19 00:00:00
nvd
nvd
CVE-2012-4969
2012-09-18 10:39:14
zdi
zdi
Microsoft Internet Explorer execCommand Remote Code Execution Vulnerability
2012-12-21 00:00:00
securityvulns
securityvulns
Microsoft Internet Explorer memory corruption
2012-10-25 00:00:00
openvas
openvas
Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
2012-09-18 00:00:00
Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
2012-09-18 00:00:00
mskb
mskb
MS12-063: Cumulative Security Update for Internet Explorer: September 21, 2012
2012-09-21 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.821 High

EPSS

Percentile

98.4%

JSON
Related for CVE-2012-4969
nessus2canvas1saint4cert1threatpost6prion1thn7cvelist1attackerkb3checkpoint_advisories1cisa_kev1cisa1nvd1zdi1securityvulns1openvas2mskb1